Trojaner-Board - Werbung erscheint plötzlich Browser, einige Wörter erscheinen als Links zu Werbeseiten

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Werbung erscheint plötzlich Browser, einige Wörter erscheinen als Links zu Werbeseiten (https://www.trojaner-board.de/155330-werbung-erscheint-ploetzlich-browser-einige-woerter-erscheinen-links-werbeseiten.html)

Werbung erscheint plötzlich Browser, einige Wörter erscheinen als Links zu Werbeseiten

Liebe Forumsgemeinde

Seit gestern erscheinen in meinem Browser Werbebanner, entdeckt habe ich es als erstes auf meiner eigenen Homepage.

Zudem sind einige Wörter farbig unterlegt und anklickbar, der Link führt dann wieder auf eine fremde Seite.

Ich habe jetzt wie vorgeschrieben FRST64 heruntergeladen und die Datei FRST.txt und Addition.txt erstellt.

Auch habe ich GMER heruntergeladen. Während der Ausführung dieses Programms hat mein PC einen Neustart durchgeführt und gab mir die Wahl im abgesicherten Modus zu starten. Ich habe allerdings Win 7 ganz normal starten lassen.
Bevor ich GMER gestartet habe, habe ich den PC vom Internet getrennt, den Browser Firefox habe ich allerdings nicht geschlossen, sonst waren keine Programme aktiv.

Ich habe also keine von GMER erzeugte Datei. Ich habe mich nicht getraut GMER nochmals zu starten.

Ich hoffe nun auf Euere geschätzte Hilfe.

beste Grüße
Jürgen

PS Mein System: Windows 7 prof. 64 Bit

Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Besten Dank für die Antwort

Ich habe keine weiteren Logfiles und auch keinen Virenscanner auf meinem System.
Die geforderten Dateien habe ich erstellt.

Ich hoffe es hilft

beste Grüße
Jürgen

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-06-2014

Ran by seaimager (administrator) on JBS_PC_2 on 16-06-2014 23:02:07

Running from C:\Users\seaimager\Desktop

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files\003\buuoujqmrk64.exe

(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe

(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

() C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

() C:\Program Files (x86)\Safe In Cloud\SafeInCloud.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

(Dropbox, Inc.) C:\Users\seaimager\AppData\Roaming\Dropbox\bin\Dropbox.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe

(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Adobe Systems) C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\lightroom.exe

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\Support\DynamicLinkSupport\dynamiclink\CS6\dynamiclinkmanager.exe

(Adobe Systems, Incorporated) C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\Support\DynamicLinkMediaServer\dynamiclinkmediaserver\1.0\dynamiclinkmediaserver.exe

(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\Support\DynamicLinkMediaServer\dynamiclinkmediaserver\1.0\32\Adobe QT32 Server.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [403888 2012-08-23] (Acronis)

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()

HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1823744 2012-01-05] (Dominik Reichl)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073352 2012-06-25] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41336 2014-05-08] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840568 2014-05-08] (Adobe Systems Inc.)

HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6049096 2012-08-23] (Acronis)

HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)

HKLM-x32\...\Run: [fst_de_31] => [X]

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [AdobeBridge] => [X]

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\seaimager\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [SafeInCloud] => C:\Program Files (x86)\Safe In Cloud\SafeInCloud.exe [1550848 2013-11-26] ()

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [moneyplex Alarm] => H:\JBS_STORAGE\moneyplex\mpxalarm

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [Browser Extensions] => C:\Users\seaimager\AppData\Roaming\Browser Extensions\CouponsHelper.exe [961384 2014-03-17] (Spigot, Inc.)

AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\Program Files (x86)\SupTab\SearchProtect64.dll [102512 2014-05-08] (Skytech Co., Ltd.)

AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => C:\Program Files (x86)\SupTab\SearchProtect32.dll [91248 2014-05-08] (Skytech Co., Ltd.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuatoCalibrationLoader.lnk

ShortcutTarget: QuatoCalibrationLoader.lnk -> C:\Program Files (x86)\Quato\iColorDisplay\QuatoCalibrationLoader.exe (Quato)

Startup: C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\seaimager\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2E370D624E2ACE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}

StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}

SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}

SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}

SearchScopes: HKCU - DefaultScope {96224679-3496-4260-A2C5-4ED4AE735F0A} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=386496&p={searchTerms}

SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}

SearchScopes: HKCU - {96224679-3496-4260-A2C5-4ED4AE735F0A} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=386496&p={searchTerms}

BHO: Browser Extensions - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\seaimager\AppData\Roaming\Browser Extensions\Coupons64.dll (Spigot, Inc.)

BHO-x32: 2rs3 - {10AD2C61-0898-4348-8600-14A342F22AC3} - C:\Program Files (x86)\SupraSavings\2rs3.dll ()

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - toolplugin - {DFEFCDEE-CF1A-4FC8-89AF-189327213627} - C:\Users\seaimager\AppData\Roaming\toolplugin\toolbar.dll No File

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837

FF DefaultSearchEngine: webssearches

FF SelectedSearchEngine: webssearches

FF Homepage: hxxp://istart.webssearches.com/?type=hppp&ts=1402844558&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)

FF Plugin: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)

FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)

FF Plugin-x32: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF user.js: detected! => C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\user.js

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Quick Start - C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\Extensions\quick_start@gmail.com [2014-06-05]

FF Extension: SupraSavings - C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\Extensions\SupraSavings@jetpack [2014-06-05]

FF Extension: Firebug - C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\Extensions\firebug@software.joehewitt.com.xpi [2014-04-07]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-05-13]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-05-13]

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-26]

FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn

FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012-06-04]

FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com

FF Extension: Quick Start - C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com [2014-06-05]
 

==================== Services (Whitelisted) =================
 

R2 buuoujqmrk64; C:\Program Files\003\buuoujqmrk64.exe [706560 2014-06-05] () [File not signed]

R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)

S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-05] (globalUpdate) [File not signed]

S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-05] (globalUpdate) [File not signed]

R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [704112 2014-05-08] (Cherished Technololgy LIMITED)

R2 nlsX86cc; C:\Windows\SysWOW64\nlssrv32.exe [66560 2011-02-15] (Nalpeiron Ltd.) [File not signed]

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2013-11-14] ()

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [635160 2014-04-22] (Wacom Technology, Corp.)
 

==================== Drivers (Whitelisted) ====================
 

S3 ASPI; C:\Windows\SysWOW64\DRIVERS\ASPI32.sys [84832 2002-07-17] (Adaptec) [File not signed]

S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()

R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)

S3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [63528 2011-05-27] (SafeNet, Inc.)

R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-01-12] (Acronis)

R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [166024 2013-01-12] (Acronis)

S3 X-Rite; C:\Windows\System32\DRIVERS\XrUsb64.sys [33600 2007-01-29] (X-Rite, Inc.)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-06-16 23:02 - 2014-06-16 23:02 - 00022648 _____ () C:\Users\seaimager\Desktop\FRST.txt

2014-06-16 23:02 - 2014-06-16 23:02 - 00000000 ____D () C:\FRST

2014-06-16 23:00 - 2014-06-16 23:01 - 02081280 _____ (Farbar) C:\Users\seaimager\Desktop\FRST64.exe

2014-06-16 22:31 - 2014-06-16 22:33 - 02736715 _____ () C:\Users\seaimager\Desktop\_2014_Juni_Mohnblumen_iphone_052.m4v

2014-06-16 22:28 - 2014-06-16 22:44 - 104349581 _____ () C:\Users\seaimager\Desktop\_2014_Juni_Mohnblumen_Ausschnitt_054_.mov

2014-06-15 17:33 - 2014-06-15 17:33 - 01315636 _____ () C:\Users\seaimager\Downloads\com_zoo_3.1.6.zip

2014-06-15 13:26 - 2014-06-15 13:26 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586(1).exe

2014-06-15 13:19 - 2014-06-15 13:22 - 00000000 ____D () C:\Users\seaimager\Documents\Java

2014-06-15 13:17 - 2014-06-15 13:17 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586.exe

2014-06-14 11:08 - 2014-06-14 11:08 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-14 11:08 - 2014-06-14 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-06-14 11:08 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys

2014-06-14 11:07 - 2014-06-14 11:08 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-14 11:07 - 2014-06-14 11:08 - 00000000 ____D () C:\Program Files\iTunes

2014-06-14 11:07 - 2014-06-14 11:08 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\iPod

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Common Files\Apple

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Bonjour

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files (x86)\Bonjour

2014-06-14 11:06 - 2014-06-14 11:06 - 112616784 _____ (Apple Inc.) C:\Users\seaimager\Downloads\iTunes64Setup.exe

2014-06-14 10:56 - 2014-06-14 10:56 - 00360028 _____ () C:\Users\seaimager\Desktop\68509_30_5_Full_final_2_16_48000_0.pkf

2014-06-05 22:58 - 2014-06-05 23:06 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part20.rar

2014-06-05 22:58 - 2014-06-05 23:06 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part19.rar

2014-06-05 22:58 - 2014-06-05 23:06 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part18.rar

2014-06-05 22:58 - 2014-06-05 23:06 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part17.rar

2014-06-05 22:58 - 2014-06-05 23:04 - 129258620 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part21.rar

2014-06-05 22:57 - 2014-06-05 23:06 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part16.rar

2014-06-05 22:57 - 2014-06-05 23:06 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part14.rar

2014-06-05 22:57 - 2014-06-05 23:06 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part13.rar

2014-06-05 22:57 - 2014-06-05 23:05 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part15.rar

2014-06-05 22:56 - 2014-06-05 23:06 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part10.rar

2014-06-05 22:56 - 2014-06-05 23:05 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part12.rar

2014-06-05 22:56 - 2014-06-05 23:05 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part11.rar

2014-06-05 22:56 - 2014-06-05 23:04 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part09.rar

2014-06-05 22:56 - 2014-06-05 23:04 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part08.rar

2014-06-05 22:55 - 2014-06-05 23:05 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part07.rar

2014-06-05 22:55 - 2014-06-05 23:04 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part05.rar

2014-06-05 22:55 - 2014-06-05 23:03 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part06.rar

2014-06-05 22:55 - 2014-06-05 23:01 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part04.rar

2014-06-05 22:55 - 2014-06-05 23:01 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part03.rar

2014-06-05 22:54 - 2014-06-05 22:59 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part02.rar

2014-06-05 22:54 - 2014-06-05 22:56 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part01.rar

2014-06-05 21:28 - 2014-06-05 21:28 - 00830792 _____ (Click Me In Limited) C:\Users\seaimager\AppData\Local\nsoCBCB.tmp

2014-06-05 20:50 - 2014-06-05 20:50 - 00000000 ____D () C:\Program Files (x86)\predm

2014-06-05 20:46 - 2014-06-05 20:46 - 00003188 _____ () C:\Windows\System32\Tasks\{801D570B-E4AB-4EC0-BB0A-C3775BBC798E}

2014-06-05 20:42 - 2014-06-05 20:42 - 00000000 ____D () C:\Users\seaimager\AppData\Local\com

2014-06-05 20:23 - 2014-06-05 20:23 - 00000000 ____D () C:\Users\seaimager\Documents\Optimizer Pro

2014-06-05 20:18 - 2014-06-16 21:22 - 00000918 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job

2014-06-05 20:18 - 2014-06-05 20:54 - 00000922 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job

2014-06-05 20:18 - 2014-06-05 20:53 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Activeris

2014-06-05 20:18 - 2014-06-05 20:52 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro

2014-06-05 20:18 - 2014-06-05 20:49 - 00003920 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA

2014-06-05 20:18 - 2014-06-05 20:49 - 00003666 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore

2014-06-05 20:18 - 2014-06-05 20:45 - 00000000 ____D () C:\ProgramData\WindowsProtectManger

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\SupTab

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\Users\seaimager\AppData\Local\globalUpdate

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\ProgramData\IePluginServices

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\Program Files (x86)\SupTab

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\Program Files (x86)\SupraSavings

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\Program Files (x86)\globalUpdate

2014-06-05 20:17 - 2014-06-05 20:32 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Genesis_06051817

2014-06-05 20:17 - 2014-06-05 20:18 - 00000000 ____D () C:\Program Files\003

2014-06-05 20:17 - 2014-06-05 20:18 - 00000000 _____ () C:\END

2014-06-05 20:17 - 2014-06-05 20:17 - 00000000 ____D () C:\Users\seaimager\AppData\Local\SearchProtect

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\WTablet

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\.android

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-06-03 19:26 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files\Tablet

2014-06-03 19:26 - 2014-06-03 19:26 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-06-03 19:26 - 2014-04-22 00:30 - 01946904 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01929496 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01922328 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01796888 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01563416 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01560344 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01556760 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01443096 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll

2014-06-03 19:26 - 2014-03-17 18:13 - 00095032 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys

2014-06-03 19:26 - 2014-03-17 18:13 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys

2014-06-03 19:26 - 2014-03-17 18:13 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys

2014-06-03 19:26 - 2012-12-12 00:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll

2014-06-03 19:26 - 2012-12-12 00:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-05-30 07:58 - 2014-05-30 07:58 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2014-05-30 07:55 - 2014-05-30 07:55 - 04968079 _____ (Tim Kosse) C:\Users\seaimager\Desktop\FileZilla_3.8.0_win32-setup.exe

2014-05-29 11:33 - 2014-05-29 14:27 - 16865617 _____ () C:\Users\seaimager\Desktop\Christian und co_2.psd

2014-05-29 11:02 - 2014-05-29 11:02 - 59411236 _____ () C:\Users\seaimager\Desktop\Christian und co.psd

2014-05-21 19:02 - 2014-05-21 19:04 - 154363320 _____ (Online Media Technologies Ltd. ) C:\Users\seaimager\Downloads\AVSVideoEditor.exe

2014-05-21 18:22 - 2014-05-21 18:22 - 00001237 _____ () C:\Users\seaimager\Desktop\AVS Video Converter.lnk

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU

2014-05-21 18:22 - 2012-03-23 19:59 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll

2014-05-21 18:22 - 2012-03-23 19:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll

2014-05-21 18:20 - 2014-05-21 18:21 - 63042752 _____ (Online Media Technologies Ltd. ) C:\Users\seaimager\Downloads\AVSVideoConverter.exe

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Program Files (x86)\Handbrake

2014-05-21 18:04 - 2014-05-21 18:04 - 14298467 _____ () C:\Users\seaimager\Downloads\HandBrake-0.9.9-1_x86_64-Win_GUI.exe

2014-05-17 16:27 - 2014-05-17 16:28 - 03670020 _____ () C:\Users\seaimager\Downloads\ddserver_openwrt-tl-mr3040-v1-squashfs-sysupgrade_0.12.bin

2014-05-17 15:07 - 2014-05-17 15:07 - 00010517 _____ () C:\Users\seaimager\Downloads\ddserver_0.2-12_ar71xx.ipk

2014-05-17 12:19 - 2014-05-17 12:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
 

==================== One Month Modified Files and Folders =======
 

2014-06-16 23:02 - 2014-06-16 23:02 - 00022648 _____ () C:\Users\seaimager\Desktop\FRST.txt

2014-06-16 23:02 - 2014-06-16 23:02 - 00000000 ____D () C:\FRST

2014-06-16 23:02 - 2012-02-25 11:07 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Temp

2014-06-16 23:01 - 2014-06-16 23:00 - 02081280 _____ (Farbar) C:\Users\seaimager\Desktop\FRST64.exe

2014-06-16 22:50 - 2012-11-08 20:19 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Skype

2014-06-16 22:46 - 2013-04-04 22:52 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-06-16 22:45 - 2013-01-19 20:13 - 00000000 ___RD () C:\Users\seaimager\Dropbox

2014-06-16 22:45 - 2013-01-19 20:05 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Dropbox

2014-06-16 22:44 - 2014-06-16 22:28 - 104349581 _____ () C:\Users\seaimager\Desktop\_2014_Juni_Mohnblumen_Ausschnitt_054_.mov

2014-06-16 22:33 - 2014-06-16 22:31 - 02736715 _____ () C:\Users\seaimager\Desktop\_2014_Juni_Mohnblumen_iphone_052.m4v

2014-06-16 22:11 - 2012-02-25 20:00 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\PTGui

2014-06-16 21:32 - 2012-02-25 14:26 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Adobe

2014-06-16 21:29 - 2009-07-14 06:45 - 00014640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-06-16 21:29 - 2009-07-14 06:45 - 00014640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-06-16 21:26 - 2012-10-02 12:59 - 01217367 _____ () C:\Windows\WindowsUpdate.log

2014-06-16 21:26 - 2009-07-14 19:58 - 10429450 _____ () C:\Windows\system32\perfh007.dat

2014-06-16 21:26 - 2009-07-14 19:58 - 03229286 _____ () C:\Windows\system32\perfc007.dat

2014-06-16 21:26 - 2009-07-14 07:13 - 00787956 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-06-16 21:22 - 2014-06-05 20:18 - 00000918 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job

2014-06-16 21:22 - 2014-05-03 09:34 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\DropboxMaster

2014-06-16 21:22 - 2013-04-04 22:52 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-06-16 21:22 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-06-16 21:22 - 2009-07-14 06:51 - 00129676 _____ () C:\Windows\setupact.log

2014-06-15 17:33 - 2014-06-15 17:33 - 01315636 _____ () C:\Users\seaimager\Downloads\com_zoo_3.1.6.zip

2014-06-15 13:26 - 2014-06-15 13:26 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586(1).exe

2014-06-15 13:23 - 2013-10-21 21:35 - 00000000 ____D () C:\ProgramData\Oracle

2014-06-15 13:23 - 2012-03-22 22:50 - 00000000 ____D () C:\Program Files (x86)\Java

2014-06-15 13:22 - 2014-06-15 13:19 - 00000000 ____D () C:\Users\seaimager\Documents\Java

2014-06-15 13:17 - 2014-06-15 13:17 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586.exe

2014-06-14 11:16 - 2014-04-13 20:07 - 00508844 _____ () C:\Users\seaimager\AppData\Roaming\PS12_panel.log

2014-06-14 11:08 - 2014-06-14 11:08 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-14 11:08 - 2014-06-14 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-06-14 11:08 - 2014-06-14 11:07 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-14 11:08 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\iTunes

2014-06-14 11:08 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-06-14 11:08 - 2012-02-26 11:20 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Apple Computer

2014-06-14 11:08 - 2012-02-25 20:06 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Apple Computer

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\iPod

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Common Files\Apple

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Bonjour

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files (x86)\Bonjour

2014-06-14 11:07 - 2012-02-25 20:03 - 00000000 ____D () C:\ProgramData\Apple Computer

2014-06-14 11:07 - 2012-02-25 20:02 - 00000000 ____D () C:\ProgramData\Apple

2014-06-14 11:06 - 2014-06-14 11:06 - 112616784 _____ (Apple Inc.) C:\Users\seaimager\Downloads\iTunes64Setup.exe

2014-06-14 10:56 - 2014-06-14 10:56 - 00360028 _____ () C:\Users\seaimager\Desktop\68509_30_5_Full_final_2_16_48000_0.pkf

2014-06-14 10:48 - 2012-02-25 20:08 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\vlc

2014-06-07 13:09 - 2012-03-03 10:10 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\HandBrake

2014-06-07 12:58 - 2012-06-04 19:13 - 00002465 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk

2014-06-07 12:58 - 2012-06-04 19:13 - 00002453 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk

2014-06-07 12:58 - 2012-06-04 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2

2014-06-07 12:57 - 2012-11-08 20:19 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-06-07 12:57 - 2012-11-08 20:19 - 00000000 ____D () C:\ProgramData\Skype

2014-06-05 23:06 - 2014-06-05 22:58 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part20.rar

2014-06-05 23:06 - 2014-06-05 22:58 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part19.rar

2014-06-05 23:06 - 2014-06-05 22:58 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part18.rar

2014-06-05 23:06 - 2014-06-05 22:58 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part17.rar

2014-06-05 23:06 - 2014-06-05 22:57 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part16.rar

2014-06-05 23:06 - 2014-06-05 22:57 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part14.rar

2014-06-05 23:06 - 2014-06-05 22:57 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part13.rar

2014-06-05 23:06 - 2014-06-05 22:56 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part10.rar

2014-06-05 23:05 - 2014-06-05 22:57 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part15.rar

2014-06-05 23:05 - 2014-06-05 22:56 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part12.rar

2014-06-05 23:05 - 2014-06-05 22:56 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part11.rar

2014-06-05 23:05 - 2014-06-05 22:55 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part07.rar

2014-06-05 23:04 - 2014-06-05 22:58 - 129258620 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part21.rar

2014-06-05 23:04 - 2014-06-05 22:56 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part09.rar

2014-06-05 23:04 - 2014-06-05 22:56 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part08.rar

2014-06-05 23:04 - 2014-06-05 22:55 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part05.rar

2014-06-05 23:03 - 2014-06-05 22:55 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part06.rar

2014-06-05 23:01 - 2014-06-05 22:55 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part04.rar

2014-06-05 23:01 - 2014-06-05 22:55 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part03.rar

2014-06-05 22:59 - 2014-06-05 22:54 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part02.rar

2014-06-05 22:56 - 2014-06-05 22:54 - 222222222 _____ () C:\Users\seaimager\Downloads\V2B.AFEFCCDGT-SHo.part01.rar

2014-06-05 22:47 - 2012-03-02 20:50 - 00019352 _____ () C:\Windows\PFRO.log

2014-06-05 21:28 - 2014-06-05 21:28 - 00830792 _____ (Click Me In Limited) C:\Users\seaimager\AppData\Local\nsoCBCB.tmp

2014-06-05 20:55 - 2012-02-25 11:08 - 00000000 ___RD () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-06-05 20:54 - 2014-06-05 20:18 - 00000922 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job

2014-06-05 20:53 - 2014-06-05 20:18 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Activeris

2014-06-05 20:52 - 2014-06-05 20:18 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro

2014-06-05 20:50 - 2014-06-05 20:50 - 00000000 ____D () C:\Program Files (x86)\predm

2014-06-05 20:49 - 2014-06-05 20:18 - 00003920 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA

2014-06-05 20:49 - 2014-06-05 20:18 - 00003666 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore

2014-06-05 20:47 - 2012-02-25 14:18 - 00001142 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2014-06-05 20:47 - 2012-02-25 11:08 - 00001421 _____ () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-06-05 20:46 - 2014-06-05 20:46 - 00003188 _____ () C:\Windows\System32\Tasks\{801D570B-E4AB-4EC0-BB0A-C3775BBC798E}

2014-06-05 20:45 - 2014-06-05 20:18 - 00000000 ____D () C:\ProgramData\WindowsProtectManger

2014-06-05 20:42 - 2014-06-05 20:42 - 00000000 ____D () C:\Users\seaimager\AppData\Local\com

2014-06-05 20:32 - 2014-06-05 20:17 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Genesis_06051817

2014-06-05 20:23 - 2014-06-05 20:23 - 00000000 ____D () C:\Users\seaimager\Documents\Optimizer Pro

2014-06-05 20:20 - 2013-02-10 23:37 - 00000000 ____D () C:\Temp

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\SupTab

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\Users\seaimager\AppData\Local\globalUpdate

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\ProgramData\IePluginServices

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\Program Files (x86)\SupTab

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\Program Files (x86)\SupraSavings

2014-06-05 20:18 - 2014-06-05 20:18 - 00000000 ____D () C:\Program Files (x86)\globalUpdate

2014-06-05 20:18 - 2014-06-05 20:17 - 00000000 ____D () C:\Program Files\003

2014-06-05 20:18 - 2014-06-05 20:17 - 00000000 _____ () C:\END

2014-06-05 20:17 - 2014-06-05 20:17 - 00000000 ____D () C:\Users\seaimager\AppData\Local\SearchProtect

2014-06-03 21:06 - 2014-05-10 17:57 - 00000000 ____D () C:\Users\seaimager\Desktop\LR Export

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\WTablet

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\.android

2014-06-03 19:30 - 2012-02-25 11:07 - 00000000 ____D () C:\Users\seaimager

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-06-03 19:27 - 2014-06-03 19:26 - 00000000 ____D () C:\Program Files\Tablet

2014-06-03 19:26 - 2014-06-03 19:26 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-06-01 19:39 - 2012-06-04 22:42 - 00001456 _____ () C:\Users\seaimager\AppData\Local\Adobe Für Web speichern 13.0 Prefs

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-05-30 13:46 - 2012-02-25 18:54 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\FileZilla

2014-05-30 08:00 - 2012-02-25 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2014-05-30 07:58 - 2014-05-30 07:58 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2014-05-30 07:55 - 2014-05-30 07:55 - 04968079 _____ (Tim Kosse) C:\Users\seaimager\Desktop\FileZilla_3.8.0_win32-setup.exe

2014-05-30 07:47 - 2013-04-04 22:52 - 00000000 ____D () C:\ProgramData\Google

2014-05-29 14:27 - 2014-05-29 11:33 - 16865617 _____ () C:\Users\seaimager\Desktop\Christian und co_2.psd

2014-05-29 11:02 - 2014-05-29 11:02 - 59411236 _____ () C:\Users\seaimager\Desktop\Christian und co.psd

2014-05-29 10:21 - 2013-01-19 20:06 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-29 10:20 - 2012-04-05 21:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-29 10:20 - 2012-03-22 22:18 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-21 19:04 - 2014-05-21 19:02 - 154363320 _____ (Online Media Technologies Ltd. ) C:\Users\seaimager\Downloads\AVSVideoEditor.exe

2014-05-21 18:22 - 2014-05-21 18:22 - 00001237 _____ () C:\Users\seaimager\Desktop\AVS Video Converter.lnk

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU

2014-05-21 18:21 - 2014-05-21 18:20 - 63042752 _____ (Online Media Technologies Ltd. ) C:\Users\seaimager\Downloads\AVSVideoConverter.exe

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Program Files (x86)\Handbrake

2014-05-21 18:04 - 2014-05-21 18:04 - 14298467 _____ () C:\Users\seaimager\Downloads\HandBrake-0.9.9-1_x86_64-Win_GUI.exe

2014-05-18 09:00 - 2012-06-12 19:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-05-17 16:28 - 2014-05-17 16:27 - 03670020 _____ () C:\Users\seaimager\Downloads\ddserver_openwrt-tl-mr3040-v1-squashfs-sysupgrade_0.12.bin

2014-05-17 15:07 - 2014-05-17 15:07 - 00010517 _____ () C:\Users\seaimager\Downloads\ddserver_0.2-12_ar71xx.ipk

2014-05-17 12:20 - 2014-05-17 12:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
 

Files to move or delete:

====================

C:\ProgramData\PKP_DLbx.DAT
 
 

Some content of TEMP:

====================

C:\Users\seaimager\AppData\Local\Temp\AMDCleanupUtility.exe

C:\Users\seaimager\AppData\Local\Temp\amsetup_activeris_default_010414_installer.exe

C:\Users\seaimager\AppData\Local\Temp\BackupSetup.exe

C:\Users\seaimager\AppData\Local\Temp\Cleanup.dll

C:\Users\seaimager\AppData\Local\Temp\cloud_backup_setup.exe

C:\Users\seaimager\AppData\Local\Temp\difxapi.dll

C:\Users\seaimager\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpzorel0.dll

C:\Users\seaimager\AppData\Local\Temp\f978377c-b7d4-4536-8e10-14ca97b13394.exe

C:\Users\seaimager\AppData\Local\Temp\freesofttoday.exe

C:\Users\seaimager\AppData\Local\Temp\genesisinstaller.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\lly_webssearches.exe

C:\Users\seaimager\AppData\Local\Temp\media.exe

C:\Users\seaimager\AppData\Local\Temp\newvideoplayersetup.exe

C:\Users\seaimager\AppData\Local\Temp\optimizerpro.exe

C:\Users\seaimager\AppData\Local\Temp\SkypeSetup.exe

C:\Users\seaimager\AppData\Local\Temp\spidentifierimpl.exe

C:\Users\seaimager\AppData\Local\Temp\vopackage.exe

C:\Users\seaimager\AppData\Local\Temp\wajam_download.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-06-01 18:46
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-06-2014

Ran by seaimager at 2014-06-16 23:02:31

Running from C:\Users\seaimager\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.10 - Adobe Systems)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden

Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{626B3D60-A661-4444-AAF5-6C75E55936E8}) (Version: 5.0 - Adobe Systems Incorporated)

Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)

Adobe Flash Player 10 ActiveX (HKLM-x32\...\{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}) (Version: 10.1.52.14 - Adobe Systems, Inc.)

Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)

Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden

Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)

Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden

Adobe Photoshop Lightroom 5.3 64-bit (HKLM\...\{2DD71ACB-552D-402C-9529-7906ACB95C30}) (Version: 5.3.1 - Adobe Systems Incorporated)

Adobe Reader X (10.1.2) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.2 - Adobe Systems Incorporated)

Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)

Adobe Widget Browser (x32 Version: 2.0.348 - Adobe Systems Incorporated.) Hidden

AKVIS NatureArt (HKLM-x32\...\{592B6EFD-B341-4802-B3B4-A808AF6CC805}) (Version: 4.5.1200.8634 - AKVIS)

AMD Accelerated Video Transcoding (Version: 12.5.100.21219 - Advanced Micro Devices, Inc.) Hidden

AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden

AMD Catalyst Install Manager (HKLM\...\{9AB0D5B6-4779-8C4F-CA91-A1FEDB56D7EC}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)

AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden

AMD Media Foundation Decoders (Version: 1.0.71219.1540 - Advanced Micro Devices, Inc.) Hidden

AMP Font Viewer (HKLM-x32\...\AMP Font Viewer) (Version:  - )

Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

AV Stumpfl Wings (HKLM-x32\...\AV Stumpfl Wings (V 5.3.3)) (Version: 5.3.3 - AV Stumpfl)

AVS Video Converter 8.5 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 8.5.1.551 - Online Media Technologies Ltd.)

bl (x32 Version: 1.0.0 - Your Company Name) Hidden

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Browser Extensions (HKCU\...\{3A787631-66A2-4634-B928-A37E73B58FB6}) (Version: 1.4 - Spigot, Inc.) <==== ATTENTION

Canon SELPHY CP740 (HKLM\...\Canon SELPHY CP740) (Version:  - )

Capture One 7.1 (HKLM\...\CaptureOne7_is1) (Version: 7.1.5.17 - Phase One A/S)

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

cyberJack Base Components (HKLM-x32\...\{FC338210-F594-11D3-BA24-00001C3AB4DF}) (Version: 6.10.0 - REINER SCT)

Digital Signage with Apps (HKLM-x32\...\SyabasTech-DigitalSignage) (Version: 1.2.2 - UNKNOWN)

Digital Signage with Apps (x32 Version: 1.2.2 - UNKNOWN) Hidden

Digital Signage with Apps Preview (HKLM-x32\...\SyabasTech-DigitalSignage-Preview) (Version: 1.1.1 - UNKNOWN)

Digital Signage with Apps Preview (x32 Version: 1.1.1 - UNKNOWN) Hidden

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)

Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)

FileZilla Client 3.8.0 (HKLM-x32\...\FileZilla Client) (Version: 3.8.0 - Tim Kosse)

Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.25.0 - Google Inc.) Hidden

HandBrake 0.9.9.1 (HKLM-x32\...\HandBrake) (Version: 0.9.9.1 - )

iColor Display 3.8.5.1 (nur entfernen) (HKCU\...\iColorDisplay) (Version:  - )

iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)

Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051F0}) (Version: 7.0.510 - Oracle)

Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Java(TM) 6 Update 37 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216035FF}) (Version: 6.0.370 - Oracle)

KeePass Password Safe 2.18 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version:  - Dominik Reichl)

MediaInfo 0.7.63 (HKLM\...\MediaInfo) (Version: 0.7.63 - MediaArea.net)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden

Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden

Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)

Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.0.4 - Google)

Pano2VR - Garden Gnome Software (HKLM-x32\...\Pano2VR) (Version:  - )

PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden

PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden

ph (x32 Version: 1.0.0 - Your Company Name) Hidden

Photo Mechanic 5 (HKLM-x32\...\{DE924CF0-B8BB-42BA-BDA0-14535F79DF3F}) (Version: 5.0 - Camera Bits, Inc)

Photomatix Pro version 4.2.7 (HKLM\...\PhotomatixPro42x64_is1) (Version: 4.2.7 - HDRsoft Ltd)

PTGui Pro 9.1.8 (HKLM-x32\...\PTGui) (Version:  - New House Internet Services B.V.)

PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden

QNAP Finder (HKLM-x32\...\QNAP_FINDER) (Version: 3.4.3.0523 - QNAP Systems, Inc.)

Qstarz Data Viewer V1.31 (HKLM-x32\...\Qstarz Data Viewer) (Version: V1.31 - )

QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

QuoVadis 6 (HKLM-x32\...\QuoVadis 6_is1) (Version: 6 - Flemming Software Development CC)

QuoVadis 7 (HKLM-x32\...\QuoVadis 7_is1) (Version: 7 - Flemming Software Development CC)

Safe In Cloud Password Manager (HKLM-x32\...\{450B8D73-CA79-40B6-B156-DD5B43CAD7B7}) (Version: 2.0 - Safe In Cloud)

Sentinel System Driver Installer 7.5.7 (HKLM-x32\...\{B281C7D1-C088-40E0-86EA-B2D9D7E0810A}) (Version: 7.5.7 - SafeNet, Inc.)

Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version:  - )

Silicon Laboratories CP210x VCP Drivers for Windows 7 (HKLM-x32\...\{FDDE7051-DEBB-41FF-A14C-5A995A290272}) (Version: 5.40.24 - Silicon Laboratories, Inc.)

Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)

Super CAD (HKLM-x32\...\Super CAD) (Version:  - )

SupraSavings (x32 Version: 1.0.0.0 - SupraSavings) Hidden <==== ATTENTION

Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version:  - )

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)

True Image 2013 (HKLM-x32\...\{59F3D2AC-5F1F-4A93-8F23-6FD4F029D9A9}Visible) (Version: 16.0.5551 - Acronis)

True Image 2013 (x32 Version: 16.0.5551 - Acronis) Hidden

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VLC media player 2.0.0 (HKLM-x32\...\VLC media player) (Version: 2.0.0 - VideoLAN)

Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.8-4 - Wacom Technology Corp.)

WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

Windows-Treiberpaket - Phase One A/S (WinUSB) USBDevice  (05/30/2013 1.12.0.68182) (HKLM\...\1D6C98F8A5FED93B7C062B26DD383655CE271976) (Version: 05/30/2013 1.12.0.68182 - Phase One A/S)

Wings Platinum 4 (HKLM-x32\...\{BBFF1DB6-55F9-41CA-B4C4-9432EC14AEFB}) (Version: 4.25.2 - AV Stumpfl)

WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D7}) (Version: 17.0.10283 - WinZip Computing, S.L. )
 

==================== Restore Points  =========================
 

26-05-2014 17:37:36 Geplanter Prüfpunkt

30-05-2014 05:47:01 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106

30-05-2014 05:47:08 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106

14-06-2014 09:07:40 Installed iTunes

15-06-2014 11:23:13 Installed Java 7 Update 51
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {094732E7-291E-4A8E-9718-1997CC61ACE1} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)

Task: {48EC4FFD-02EF-4B88-9EC3-FBCBA0C50E43} - System32\Tasks\AdobeAAMUpdater-1.0-JBs_PC_2-seaimager => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)

Task: {82E79536-3F61-4842-93D0-F7BFB144A93E} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-06-05] (globalUpdate) <==== ATTENTION

Task: {96429E48-7204-4417-AF9C-3648B0DAE097} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-06-05] (globalUpdate) <==== ATTENTION

Task: {BA1F0223-C938-4F0B-BB89-A706C5B4F613} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-04] (Google Inc.)

Task: {FE006A67-5C76-4D20-A1F8-645656FCCB98} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {FEBC7433-917F-4A3E-A461-146CAFF70C0B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-04] (Google Inc.)

Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION

Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-06-05 20:18 - 2014-06-05 20:18 - 00706560 _____ () C:\Program Files\003\buuoujqmrk64.exe

2013-11-14 15:28 - 2013-11-14 15:28 - 00248736 _____ () C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe

2014-06-03 19:26 - 2014-04-22 00:30 - 01356568 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll

2014-01-21 23:41 - 2013-10-18 16:32 - 00214016 _____ () C:\Program Files\Phase One\Capture One 7\WIC\WIC64\P1.WIC.NativeComWrapper.dll

2014-01-21 23:41 - 2013-10-11 12:41 - 35479552 _____ () C:\Program Files\Phase One\Capture One 7\WIC\WIC64\ImgCoreDll.dll

2014-01-21 23:41 - 2013-10-11 12:41 - 00609792 _____ () C:\Program Files\Phase One\Capture One 7\WIC\WIC64\OpenCoreDll.dll

2013-11-26 17:55 - 2013-11-26 17:55 - 01550848 _____ () C:\Program Files (x86)\Safe In Cloud\SafeInCloud.exe

2011-07-29 01:08 - 2011-07-29 01:08 - 01259376 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2013-12-02 16:58 - 2013-12-02 16:58 - 00727448 _____ () C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\AgKernel.dll

2013-12-02 16:59 - 2013-12-02 16:59 - 00332184 _____ () C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\WFCore.dll

2013-12-02 16:59 - 2013-12-02 16:59 - 00030104 _____ () C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\WFSQLite.dll

2013-12-02 16:59 - 2013-12-02 16:59 - 00081304 _____ () C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\WFWeb.dll

2013-12-02 16:59 - 2013-12-02 16:59 - 00713112 _____ () C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\WFOzClient.dll

2013-12-02 17:00 - 2013-12-02 17:00 - 00115096 _____ () C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\moxplugins\AppManagerLR.mox

2013-12-02 17:00 - 2013-12-02 17:00 - 00246680 _____ () C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\moxplugins\wpdmanager.mox

2013-12-02 16:58 - 2013-12-02 16:58 - 03505560 _____ () C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\Support\DynamicLinkMediaServer\dynamiclinkmediaserver\1.0\DNxHDCodec.dll

2013-12-02 16:33 - 2013-12-02 16:33 - 00302592 _____ () C:\Program Files\Adobe\Adobe Photoshop Lightroom 5.3\Support\DynamicLinkMediaServer\dynamiclinkmediaserver\1.0\MOG_Framework_2.2.11.dll

2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-01-06 17:54 - 2007-05-31 08:38 - 00167936 ____N () C:\Windows\SysWOW64\SerialXP.dll

2012-08-23 01:42 - 2012-08-23 01:42 - 00435584 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll

2014-06-16 21:22 - 2014-06-16 21:22 - 00043008 _____ () C:\Users\seaimager\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpzorel0.dll

2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\seaimager\AppData\Roaming\Dropbox\bin\libcef.dll

2011-07-29 01:09 - 2011-07-29 01:09 - 00096112 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2014-05-08 13:22 - 2014-05-08 13:22 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu

2012-08-23 04:35 - 2012-08-23 04:35 - 13873200 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll

2012-08-23 04:31 - 2012-08-23 04:31 - 01590656 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\icudt38.dll

2012-07-24 15:48 - 2012-07-24 15:48 - 00012160 _____ () C:\Program Files (x86)\Common Files\Acronis\TibMounter\icudt38.dll

2014-05-17 12:19 - 2014-05-17 12:19 - 03019888 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll

2014-05-17 12:19 - 2014-05-17 12:19 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll

2014-05-17 12:19 - 2014-05-17 12:19 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

2014-05-13 23:04 - 2014-05-13 23:04 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2014-05-29 10:20 - 2014-05-29 10:20 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\Windows:nlsPreferences

AlternateDataStreams: C:\ProgramData\TEMP:3241321C

AlternateDataStreams: C:\Users\seaimager\AppData\Local\Temp:QxzaNzdeoy5arJs302ramfp7S6
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== EXE Association (whitelisted) =============
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 
 

==================== Faulty Device Manager Devices =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: RAID-Controller

Description: RAID-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (06/16/2014 09:26:23 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)

Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "124868". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.
 

Error: (06/16/2014 09:26:22 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (06/15/2014 05:06:31 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)

Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "124700". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.
 

Error: (06/15/2014 05:06:31 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (06/15/2014 00:23:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)

Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "124532". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.
 

Error: (06/15/2014 00:23:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (06/15/2014 00:20:12 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)

Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "124364". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.
 

Error: (06/15/2014 00:20:12 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (06/14/2014 10:41:10 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: start.exe_Video2Brain, Version: 2.1.10.0, Zeitstempel: 0x2a425e19

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0003332f

ID des fehlerhaften Prozesses: 0xdc8

Startzeit der fehlerhaften Anwendung: 0xstart.exe_Video2Brain0

Pfad der fehlerhaften Anwendung: start.exe_Video2Brain1

Pfad des fehlerhaften Moduls: start.exe_Video2Brain2

Berichtskennung: start.exe_Video2Brain3
 

Error: (06/14/2014 10:23:06 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)

Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "124196". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.
 
 

System errors:

=============

Error: (06/16/2014 09:32:13 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)

Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.
 

Error: (06/05/2014 08:56:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Update ScanTack" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (06/05/2014 08:20:31 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Installer" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

%%1056
 

Error: (06/05/2014 08:18:31 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (06/03/2014 07:46:23 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)

Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.
 

Error: (06/03/2014 07:34:05 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)

Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.
 

Error: (05/26/2014 08:42:18 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "FRITZ-NAS",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{02A05241-1FFF-45D0-A3D9-2745997251EE}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (05/23/2014 02:58:03 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)

Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.
 

Error: (05/18/2014 07:25:17 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
 

Error: (05/17/2014 04:28:03 PM) (Source: Disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR4 gefunden.
 
 

Microsoft Office Sessions:

=========================

Error: (06/16/2014 09:26:23 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)

Description: 12486816C4E70100C2E70100C2E70100B8010000
 

Error: (06/16/2014 09:26:22 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Performance1637070000C2E701000000000009030000
 

Error: (06/15/2014 05:06:31 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)

Description: 124700161CE701001AE701001AE70100B8010000
 

Error: (06/15/2014 05:06:31 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Performance16370700001AE701000000000009030000
 

Error: (06/15/2014 00:23:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)

Description: 1245321674E6010072E6010072E60100B8010000
 

Error: (06/15/2014 00:23:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Performance163707000072E601000000000009030000
 

Error: (06/15/2014 00:20:12 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)

Description: 12436416CCE50100CAE50100CAE50100B8010000
 

Error: (06/15/2014 00:20:12 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Performance1637070000CAE501000000000009030000
 

Error: (06/14/2014 10:41:10 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: start.exe_Video2Brain2.1.10.02a425e19ntdll.dll6.1.7601.1822951fb1072c00000050003332fdc801cf87ac2d3a5767W:\JBS-NAS-SERVER)\Tutorials\Video_Tutorials\Landschaft_Architektur_Pano_V2B\start.exeC:\Windows\SysWOW64\ntdll.dlla1c6f801-f39f-11e3-9a77-90e6ba57a091
 

Error: (06/14/2014 10:23:06 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)

Description: 1241961624E5010022E5010022E50100B8010000
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-06-04 17:25:43.778

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-04 17:25:43.732

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:45:11.309

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:45:11.278

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:33:55.556

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:33:55.524

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:29:23.956

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:29:23.910

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:27:29.106

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:27:29.075

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 34%

Total physical RAM: 12279.12 MB

Available physical RAM: 8044.06 MB

Total Pagefile: 24556.42 MB

Available Pagefile: 19935.48 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:238.47 GB) (Free:56.66 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (Daten_Disk) (Fixed) (Total:1397.26 GB) (Free:752.53 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive e: (Daten_Disk) (Fixed) (Total:1397.26 GB) (Free:1207.59 GB) NTFS

Drive h: (BILDERTANK) (Fixed) (Total:465.65 GB) (Free:357.55 GB) FAT32

Drive i: (NIKON D3X) (Removable) (Total:59.62 GB) (Free:51.14 GB) FAT32

Drive k: () (Removable) (Total:29.47 GB) (Free:28.08 GB) FAT32

Drive w: (Backup) (Network) (Total:3663.11 GB) (Free:1303.47 GB) NTFS

Drive y: (Download) (Network) (Total:1832.31 GB) (Free:810 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238 GB) (Disk ID: 529D01C9)

Partition 1: (Active) - (Size=238 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 45131F39)

Partition 1: (Active) - (Size=-698727006208) - (Type=07 NTFS)
 

========================================================

Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 13321468)

Partition 1: (Active) - (Size=-698727006208) - (Type=07 NTFS)
 

========================================================

Disk: 3 (Size: 466 GB) (Disk ID: 2409CEA2)

Partition 1: (Not Active) - (Size=466 GB) - (Type=0C)
 

========================================================

Disk: 4 (Size: 60 GB) (Disk ID: 00000000)
 

Partition: GPT Partition Type.
 

========================================================

Disk: 6 (Size: 29 GB) (Disk ID: 00000000)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

Zitat:

Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{626B3D60-A661-4444-AAF5-6C75E55936E8}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)

ist das ein gewerblich genutztes System? :wtf:

Hallo cosinus

Nein das System wird nicht gewerblich genutzt, ich bin Hobbyfotograf

beste grüße

Jürgen

Dann haste aber ein teures Hobby, AdobeCS ist nicht gerade billig :wtf:

Adware/Junkware/Toolbars entfernen

1. Schritt: Malwarebytes

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

2. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

3. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

4. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo Cosinus

Habe nun alles deinen Anweisungen gemäß erledigt, einzig bei der letzte Sache mit FRST habe ich keine Addition.txt bekommen.

Alle weiteren Log Dateien habe ich als Anhang beigefügt. Ich hoffe ich habe da alles richtig gemacht.

Ich muss schon sagen so einen Service findet man doch heute gar nicht mehr, ich bin sehr erstaunt und sehr dankbar.

beste Grüße
Jürgen

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-06-2014

Ran by seaimager (administrator) on JBS_PC_2 on 17-06-2014 20:31:51

Running from C:\Users\seaimager\Desktop

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

() C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe

() C:\Program Files (x86)\Safe In Cloud\SafeInCloud.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Dropbox, Inc.) C:\Users\seaimager\AppData\Roaming\Dropbox\bin\Dropbox.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe

(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [403888 2012-08-23] (Acronis)

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()

HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1823744 2012-01-05] (Dominik Reichl)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073352 2012-06-25] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41336 2014-05-08] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840568 2014-05-08] (Adobe Systems Inc.)

HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6049096 2012-08-23] (Acronis)

HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [AdobeBridge] => [X]

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\seaimager\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [SafeInCloud] => C:\Program Files (x86)\Safe In Cloud\SafeInCloud.exe [1550848 2013-11-26] ()

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [moneyplex Alarm] => H:\JBS_STORAGE\moneyplex\mpxalarm

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuatoCalibrationLoader.lnk

ShortcutTarget: QuatoCalibrationLoader.lnk -> C:\Program Files (x86)\Quato\iColorDisplay\QuatoCalibrationLoader.exe (Quato)

Startup: C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\seaimager\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2E370D624E2ACE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - {96224679-3496-4260-A2C5-4ED4AE735F0A} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=386496&p={searchTerms}

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)

FF Plugin: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)

FF Plugin-x32: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Firebug - C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\Extensions\firebug@software.joehewitt.com.xpi [2014-04-07]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-05-13]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-05-13]

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-26]

FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn

FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012-06-04]
 

==================== Services (Whitelisted) =================
 

R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 nlsX86cc; C:\Windows\SysWOW64\nlssrv32.exe [66560 2011-02-15] (Nalpeiron Ltd.) [File not signed]

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2013-11-14] ()

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [635160 2014-04-22] (Wacom Technology, Corp.)
 

==================== Drivers (Whitelisted) ====================
 

S3 ASPI; C:\Windows\SysWOW64\DRIVERS\ASPI32.sys [84832 2002-07-17] (Adaptec) [File not signed]

S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-17] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()

R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)

S3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [63528 2011-05-27] (SafeNet, Inc.)

R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-01-12] (Acronis)

R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [166024 2013-01-12] (Acronis)

S3 X-Rite; C:\Windows\System32\DRIVERS\XrUsb64.sys [33600 2007-01-29] (X-Rite, Inc.)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-06-17 20:29 - 2014-06-17 20:29 - 00000778 _____ () C:\Users\seaimager\Desktop\JRT.txt

2014-06-17 20:23 - 2014-06-17 20:23 - 01016261 _____ (Thisisu) C:\Users\seaimager\Desktop\JRT(1).exe

2014-06-17 20:22 - 2014-06-17 20:22 - 00004169 _____ () C:\Users\seaimager\Desktop\AdwCleaner[S0].txt

2014-06-17 20:17 - 2014-06-17 20:18 - 00000000 ____D () C:\AdwCleaner

2014-06-17 20:15 - 2014-06-17 20:15 - 01333465 _____ () C:\Users\seaimager\Desktop\adwcleaner_3.212.exe

2014-06-17 20:15 - 2014-06-17 20:15 - 00083124 _____ () C:\Users\seaimager\Desktop\mbam.txt

2014-06-17 19:37 - 2014-06-17 20:20 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-06-17 19:37 - 2014-06-17 19:37 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-06-17 19:37 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-06-17 19:37 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-06-17 19:37 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-06-17 19:36 - 2014-06-17 19:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\seaimager\Downloads\mbam-setup-2.0.2.1012.exe

2014-06-17 00:21 - 2014-06-17 00:21 - 00004471 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log

2014-06-16 23:35 - 2014-06-16 23:35 - 00276128 _____ () C:\Windows\Minidump\061614-14664-01.dmp

2014-06-16 23:18 - 2014-06-16 23:18 - 00380416 _____ () C:\Users\seaimager\Desktop\Gmer-19357.exe

2014-06-16 23:02 - 2014-06-17 20:31 - 00016774 _____ () C:\Users\seaimager\Desktop\FRST.txt

2014-06-16 23:02 - 2014-06-17 20:31 - 00000000 ____D () C:\FRST

2014-06-16 23:02 - 2014-06-16 23:03 - 00040404 _____ () C:\Users\seaimager\Desktop\Addition.txt

2014-06-16 23:00 - 2014-06-16 23:01 - 02081280 _____ (Farbar) C:\Users\seaimager\Desktop\FRST64.exe

2014-06-15 17:33 - 2014-06-15 17:33 - 01315636 _____ () C:\Users\seaimager\Downloads\com_zoo_3.1.6.zip

2014-06-15 13:26 - 2014-06-15 13:26 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586(1).exe

2014-06-15 13:19 - 2014-06-15 13:22 - 00000000 ____D () C:\Users\seaimager\Documents\Java

2014-06-15 13:17 - 2014-06-15 13:17 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586.exe

2014-06-14 11:08 - 2014-06-14 11:08 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-14 11:08 - 2014-06-14 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-06-14 11:08 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys

2014-06-14 11:07 - 2014-06-14 11:08 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-14 11:07 - 2014-06-14 11:08 - 00000000 ____D () C:\Program Files\iTunes

2014-06-14 11:07 - 2014-06-14 11:08 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\iPod

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Common Files\Apple

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Bonjour

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files (x86)\Bonjour

2014-06-14 11:06 - 2014-06-14 11:06 - 112616784 _____ (Apple Inc.) C:\Users\seaimager\Downloads\iTunes64Setup.exe

2014-06-05 21:28 - 2014-06-05 21:28 - 00830792 _____ (Click Me In Limited) C:\Users\seaimager\AppData\Local\nsoCBCB.tmp

2014-06-05 20:46 - 2014-06-05 20:46 - 00003188 _____ () C:\Windows\System32\Tasks\{801D570B-E4AB-4EC0-BB0A-C3775BBC798E}

2014-06-05 20:42 - 2014-06-05 20:42 - 00000000 ____D () C:\Users\seaimager\AppData\Local\com

2014-06-05 20:17 - 2014-06-05 20:32 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Genesis_06051817

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\WTablet

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\.android

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-06-03 19:26 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files\Tablet

2014-06-03 19:26 - 2014-06-03 19:26 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-06-03 19:26 - 2014-04-22 00:30 - 01946904 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01929496 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01922328 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01796888 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01563416 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01560344 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01556760 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01443096 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll

2014-06-03 19:26 - 2014-03-17 18:13 - 00095032 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys

2014-06-03 19:26 - 2014-03-17 18:13 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys

2014-06-03 19:26 - 2014-03-17 18:13 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys

2014-06-03 19:26 - 2012-12-12 00:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll

2014-06-03 19:26 - 2012-12-12 00:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-05-30 07:58 - 2014-05-30 07:58 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2014-05-30 07:55 - 2014-05-30 07:55 - 04968079 _____ (Tim Kosse) C:\Users\seaimager\Desktop\FileZilla_3.8.0_win32-setup.exe

2014-05-21 18:22 - 2014-05-21 18:22 - 00001237 _____ () C:\Users\seaimager\Desktop\AVS Video Converter.lnk

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU

2014-05-21 18:22 - 2012-03-23 19:59 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll

2014-05-21 18:22 - 2012-03-23 19:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Program Files (x86)\Handbrake

2014-05-21 18:04 - 2014-05-21 18:04 - 14298467 _____ () C:\Users\seaimager\Downloads\HandBrake-0.9.9-1_x86_64-Win_GUI.exe
 

==================== One Month Modified Files and Folders =======
 

2014-06-17 20:31 - 2014-06-16 23:02 - 00016774 _____ () C:\Users\seaimager\Desktop\FRST.txt

2014-06-17 20:31 - 2014-06-16 23:02 - 00000000 ____D () C:\FRST

2014-06-17 20:31 - 2012-02-25 11:07 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Temp

2014-06-17 20:29 - 2014-06-17 20:29 - 00000778 _____ () C:\Users\seaimager\Desktop\JRT.txt

2014-06-17 20:27 - 2009-07-14 06:45 - 00014640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-06-17 20:27 - 2009-07-14 06:45 - 00014640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-06-17 20:26 - 2009-07-14 19:58 - 10488290 _____ () C:\Windows\system32\perfh007.dat

2014-06-17 20:26 - 2009-07-14 19:58 - 03248030 _____ () C:\Windows\system32\perfc007.dat

2014-06-17 20:26 - 2009-07-14 07:13 - 00787956 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-06-17 20:23 - 2014-06-17 20:23 - 01016261 _____ (Thisisu) C:\Users\seaimager\Desktop\JRT(1).exe

2014-06-17 20:22 - 2014-06-17 20:22 - 00004169 _____ () C:\Users\seaimager\Desktop\AdwCleaner[S0].txt

2014-06-17 20:21 - 2012-11-08 20:19 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Skype

2014-06-17 20:20 - 2014-06-17 19:37 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-06-17 20:20 - 2014-05-03 09:34 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\DropboxMaster

2014-06-17 20:20 - 2013-04-04 22:52 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-06-17 20:20 - 2013-01-19 20:13 - 00000000 ___RD () C:\Users\seaimager\Dropbox

2014-06-17 20:20 - 2013-01-19 20:05 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Dropbox

2014-06-17 20:20 - 2012-03-02 20:50 - 00149474 _____ () C:\Windows\PFRO.log

2014-06-17 20:20 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-06-17 20:20 - 2009-07-14 06:51 - 00129900 _____ () C:\Windows\setupact.log

2014-06-17 20:18 - 2014-06-17 20:17 - 00000000 ____D () C:\AdwCleaner

2014-06-17 20:18 - 2012-10-02 12:59 - 01318596 _____ () C:\Windows\WindowsUpdate.log

2014-06-17 20:15 - 2014-06-17 20:15 - 01333465 _____ () C:\Users\seaimager\Desktop\adwcleaner_3.212.exe

2014-06-17 20:15 - 2014-06-17 20:15 - 00083124 _____ () C:\Users\seaimager\Desktop\mbam.txt

2014-06-17 19:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system

2014-06-17 19:46 - 2013-04-04 22:52 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-06-17 19:45 - 2014-03-30 19:26 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Browser Extensions

2014-06-17 19:45 - 2013-02-10 23:37 - 00000000 ____D () C:\Temp

2014-06-17 19:37 - 2014-06-17 19:37 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-06-17 19:36 - 2014-06-17 19:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\seaimager\Downloads\mbam-setup-2.0.2.1012.exe

2014-06-17 19:28 - 2012-02-25 20:08 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\vlc

2014-06-17 19:09 - 2013-04-04 22:52 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Google

2014-06-17 18:39 - 2012-02-25 14:26 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Adobe

2014-06-17 00:22 - 2013-10-21 21:35 - 00000000 ____D () C:\ProgramData\Oracle

2014-06-17 00:21 - 2014-06-17 00:21 - 00004471 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log

2014-06-17 00:21 - 2012-03-22 22:50 - 00000000 ____D () C:\Program Files (x86)\Java

2014-06-16 23:35 - 2014-06-16 23:35 - 00276128 _____ () C:\Windows\Minidump\061614-14664-01.dmp

2014-06-16 23:35 - 2013-06-01 01:43 - 755909730 _____ () C:\Windows\MEMORY.DMP

2014-06-16 23:35 - 2013-06-01 01:43 - 00000000 ____D () C:\Windows\Minidump

2014-06-16 23:18 - 2014-06-16 23:18 - 00380416 _____ () C:\Users\seaimager\Desktop\Gmer-19357.exe

2014-06-16 23:03 - 2014-06-16 23:02 - 00040404 _____ () C:\Users\seaimager\Desktop\Addition.txt

2014-06-16 23:01 - 2014-06-16 23:00 - 02081280 _____ (Farbar) C:\Users\seaimager\Desktop\FRST64.exe

2014-06-16 22:11 - 2012-02-25 20:00 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\PTGui

2014-06-15 17:33 - 2014-06-15 17:33 - 01315636 _____ () C:\Users\seaimager\Downloads\com_zoo_3.1.6.zip

2014-06-15 13:26 - 2014-06-15 13:26 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586(1).exe

2014-06-15 13:22 - 2014-06-15 13:19 - 00000000 ____D () C:\Users\seaimager\Documents\Java

2014-06-15 13:17 - 2014-06-15 13:17 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586.exe

2014-06-14 11:16 - 2014-04-13 20:07 - 00508844 _____ () C:\Users\seaimager\AppData\Roaming\PS12_panel.log

2014-06-14 11:08 - 2014-06-14 11:08 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-14 11:08 - 2014-06-14 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-06-14 11:08 - 2014-06-14 11:07 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-14 11:08 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\iTunes

2014-06-14 11:08 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-06-14 11:08 - 2012-02-26 11:20 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Apple Computer

2014-06-14 11:08 - 2012-02-25 20:06 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Apple Computer

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\iPod

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Common Files\Apple

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Bonjour

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files (x86)\Bonjour

2014-06-14 11:07 - 2012-02-25 20:03 - 00000000 ____D () C:\ProgramData\Apple Computer

2014-06-14 11:07 - 2012-02-25 20:02 - 00000000 ____D () C:\ProgramData\Apple

2014-06-14 11:06 - 2014-06-14 11:06 - 112616784 _____ (Apple Inc.) C:\Users\seaimager\Downloads\iTunes64Setup.exe

2014-06-07 13:09 - 2012-03-03 10:10 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\HandBrake

2014-06-07 12:58 - 2012-06-04 19:13 - 00002465 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk

2014-06-07 12:58 - 2012-06-04 19:13 - 00002453 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk

2014-06-07 12:58 - 2012-06-04 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2

2014-06-07 12:57 - 2012-11-08 20:19 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-06-07 12:57 - 2012-11-08 20:19 - 00000000 ____D () C:\ProgramData\Skype

2014-06-05 21:28 - 2014-06-05 21:28 - 00830792 _____ (Click Me In Limited) C:\Users\seaimager\AppData\Local\nsoCBCB.tmp

2014-06-05 20:55 - 2012-02-25 11:08 - 00000000 ___RD () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-06-05 20:47 - 2012-02-25 14:18 - 00001142 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2014-06-05 20:47 - 2012-02-25 11:08 - 00001421 _____ () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-06-05 20:46 - 2014-06-05 20:46 - 00003188 _____ () C:\Windows\System32\Tasks\{801D570B-E4AB-4EC0-BB0A-C3775BBC798E}

2014-06-05 20:42 - 2014-06-05 20:42 - 00000000 ____D () C:\Users\seaimager\AppData\Local\com

2014-06-05 20:32 - 2014-06-05 20:17 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Genesis_06051817

2014-06-03 21:06 - 2014-05-10 17:57 - 00000000 ____D () C:\Users\seaimager\Desktop\LR Export

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\WTablet

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\.android

2014-06-03 19:30 - 2012-02-25 11:07 - 00000000 ____D () C:\Users\seaimager

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-06-03 19:27 - 2014-06-03 19:26 - 00000000 ____D () C:\Program Files\Tablet

2014-06-03 19:26 - 2014-06-03 19:26 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-06-01 19:39 - 2012-06-04 22:42 - 00001456 _____ () C:\Users\seaimager\AppData\Local\Adobe Für Web speichern 13.0 Prefs

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-05-30 13:46 - 2012-02-25 18:54 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\FileZilla

2014-05-30 08:00 - 2012-02-25 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2014-05-30 07:58 - 2014-05-30 07:58 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2014-05-30 07:55 - 2014-05-30 07:55 - 04968079 _____ (Tim Kosse) C:\Users\seaimager\Desktop\FileZilla_3.8.0_win32-setup.exe

2014-05-30 07:47 - 2013-04-04 22:52 - 00000000 ____D () C:\ProgramData\Google

2014-05-29 10:21 - 2013-01-19 20:06 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-29 10:20 - 2012-04-05 21:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-29 10:20 - 2012-03-22 22:18 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-21 18:22 - 2014-05-21 18:22 - 00001237 _____ () C:\Users\seaimager\Desktop\AVS Video Converter.lnk

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Program Files (x86)\Handbrake

2014-05-21 18:04 - 2014-05-21 18:04 - 14298467 _____ () C:\Users\seaimager\Downloads\HandBrake-0.9.9-1_x86_64-Win_GUI.exe

2014-05-18 09:00 - 2012-06-12 19:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
 

Files to move or delete:

====================

C:\ProgramData\PKP_DLbx.DAT
 
 

Some content of TEMP:

====================

C:\Users\seaimager\AppData\Local\Temp\AMDCleanupUtility.exe

C:\Users\seaimager\AppData\Local\Temp\amsetup_activeris_default_010414_installer.exe

C:\Users\seaimager\AppData\Local\Temp\BackupSetup.exe

C:\Users\seaimager\AppData\Local\Temp\Cleanup.dll

C:\Users\seaimager\AppData\Local\Temp\cloud_backup_setup.exe

C:\Users\seaimager\AppData\Local\Temp\difxapi.dll

C:\Users\seaimager\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgdcdqn.dll

C:\Users\seaimager\AppData\Local\Temp\genesisinstaller.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\lly_webssearches.exe

C:\Users\seaimager\AppData\Local\Temp\optimizerpro.exe

C:\Users\seaimager\AppData\Local\Temp\Quarantine.exe

C:\Users\seaimager\AppData\Local\Temp\SkypeSetup.exe

C:\Users\seaimager\AppData\Local\Temp\vopackage.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-06-01 18:46
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Scan klicken.

http://saved.im/mtg0mjy4yjlu/2014-04...ryscantool.png

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-06-2014

Ran by seaimager (administrator) on JBS_PC_2 on 17-06-2014 22:17:22

Running from C:\Users\seaimager\Desktop

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

() C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe

() C:\Program Files (x86)\Safe In Cloud\SafeInCloud.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Dropbox, Inc.) C:\Users\seaimager\AppData\Roaming\Dropbox\bin\Dropbox.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe

(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [403888 2012-08-23] (Acronis)

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()

HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1823744 2012-01-05] (Dominik Reichl)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073352 2012-06-25] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41336 2014-05-08] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840568 2014-05-08] (Adobe Systems Inc.)

HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6049096 2012-08-23] (Acronis)

HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [AdobeBridge] => [X]

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\seaimager\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [SafeInCloud] => C:\Program Files (x86)\Safe In Cloud\SafeInCloud.exe [1550848 2013-11-26] ()

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)

HKU\S-1-5-21-1090653915-3958093925-69300803-1000\...\Run: [moneyplex Alarm] => H:\JBS_STORAGE\moneyplex\mpxalarm

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuatoCalibrationLoader.lnk

ShortcutTarget: QuatoCalibrationLoader.lnk -> C:\Program Files (x86)\Quato\iColorDisplay\QuatoCalibrationLoader.exe (Quato)

Startup: C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\seaimager\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2E370D624E2ACE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - {96224679-3496-4260-A2C5-4ED4AE735F0A} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=386496&p={searchTerms}

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)

FF Plugin: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)

FF Plugin-x32: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Firebug - C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\Extensions\firebug@software.joehewitt.com.xpi [2014-04-07]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-05-13]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-05-13]

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-26]

FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn

FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012-06-04]
 

==================== Services (Whitelisted) =================
 

R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 nlsX86cc; C:\Windows\SysWOW64\nlssrv32.exe [66560 2011-02-15] (Nalpeiron Ltd.) [File not signed]

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2013-11-14] ()

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [635160 2014-04-22] (Wacom Technology, Corp.)
 

==================== Drivers (Whitelisted) ====================
 

S3 ASPI; C:\Windows\SysWOW64\DRIVERS\ASPI32.sys [84832 2002-07-17] (Adaptec) [File not signed]

S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-17] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()

R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)

S3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [63528 2011-05-27] (SafeNet, Inc.)

R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-01-12] (Acronis)

R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [166024 2013-01-12] (Acronis)

S3 X-Rite; C:\Windows\System32\DRIVERS\XrUsb64.sys [33600 2007-01-29] (X-Rite, Inc.)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-06-17 22:16 - 2014-06-17 22:17 - 00016913 _____ () C:\Users\seaimager\Desktop\FRST.txt

2014-06-17 20:49 - 2014-06-17 20:49 - 00001027 _____ () C:\Users\Public\Desktop\MozBackup.lnk

2014-06-17 20:49 - 2014-06-17 20:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup

2014-06-17 20:49 - 2014-06-17 20:49 - 00000000 ____D () C:\Program Files (x86)\MozBackup

2014-06-17 20:48 - 2014-06-17 20:48 - 01035926 _____ () C:\Users\seaimager\Downloads\MozBackup-1.5.1-EN.exe

2014-06-17 20:35 - 2014-06-17 20:35 - 00000000 ____D () C:\Users\seaimager\Desktop\Neuer Ordner

2014-06-17 20:29 - 2014-06-17 20:29 - 00000778 _____ () C:\Users\seaimager\Desktop\JRT.txt

2014-06-17 20:23 - 2014-06-17 20:23 - 01016261 _____ (Thisisu) C:\Users\seaimager\Desktop\JRT(1).exe

2014-06-17 20:22 - 2014-06-17 20:22 - 00004169 _____ () C:\Users\seaimager\Desktop\AdwCleaner[S0].txt

2014-06-17 20:17 - 2014-06-17 20:18 - 00000000 ____D () C:\AdwCleaner

2014-06-17 20:15 - 2014-06-17 20:15 - 01333465 _____ () C:\Users\seaimager\Desktop\adwcleaner_3.212.exe

2014-06-17 20:15 - 2014-06-17 20:15 - 00083124 _____ () C:\Users\seaimager\Desktop\mbam.txt

2014-06-17 19:37 - 2014-06-17 21:20 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-06-17 19:37 - 2014-06-17 19:37 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-06-17 19:37 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-06-17 19:37 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-06-17 19:37 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-06-17 19:36 - 2014-06-17 19:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\seaimager\Downloads\mbam-setup-2.0.2.1012.exe

2014-06-17 00:21 - 2014-06-17 00:21 - 00004471 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log

2014-06-16 23:35 - 2014-06-16 23:35 - 00276128 _____ () C:\Windows\Minidump\061614-14664-01.dmp

2014-06-16 23:18 - 2014-06-16 23:18 - 00380416 _____ () C:\Users\seaimager\Desktop\Gmer-19357.exe

2014-06-16 23:02 - 2014-06-17 22:17 - 00000000 ____D () C:\FRST

2014-06-16 23:00 - 2014-06-16 23:01 - 02081280 _____ (Farbar) C:\Users\seaimager\Desktop\FRST64.exe

2014-06-15 17:33 - 2014-06-15 17:33 - 01315636 _____ () C:\Users\seaimager\Downloads\com_zoo_3.1.6.zip

2014-06-15 13:26 - 2014-06-15 13:26 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586(1).exe

2014-06-15 13:19 - 2014-06-15 13:22 - 00000000 ____D () C:\Users\seaimager\Documents\Java

2014-06-15 13:17 - 2014-06-15 13:17 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586.exe

2014-06-14 11:08 - 2014-06-14 11:08 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-14 11:08 - 2014-06-14 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-06-14 11:08 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys

2014-06-14 11:07 - 2014-06-14 11:08 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-14 11:07 - 2014-06-14 11:08 - 00000000 ____D () C:\Program Files\iTunes

2014-06-14 11:07 - 2014-06-14 11:08 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\iPod

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Common Files\Apple

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Bonjour

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files (x86)\Bonjour

2014-06-14 11:06 - 2014-06-14 11:06 - 112616784 _____ (Apple Inc.) C:\Users\seaimager\Downloads\iTunes64Setup.exe

2014-06-05 21:28 - 2014-06-05 21:28 - 00830792 _____ (Click Me In Limited) C:\Users\seaimager\AppData\Local\nsoCBCB.tmp

2014-06-05 20:46 - 2014-06-05 20:46 - 00003188 _____ () C:\Windows\System32\Tasks\{801D570B-E4AB-4EC0-BB0A-C3775BBC798E}

2014-06-05 20:42 - 2014-06-05 20:42 - 00000000 ____D () C:\Users\seaimager\AppData\Local\com

2014-06-05 20:17 - 2014-06-05 20:32 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Genesis_06051817

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\WTablet

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\.android

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-06-03 19:26 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files\Tablet

2014-06-03 19:26 - 2014-06-03 19:26 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-06-03 19:26 - 2014-04-22 00:30 - 01946904 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01929496 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01922328 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01796888 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01563416 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01560344 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01556760 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll

2014-06-03 19:26 - 2014-04-22 00:30 - 01443096 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll

2014-06-03 19:26 - 2014-03-17 18:13 - 00095032 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys

2014-06-03 19:26 - 2014-03-17 18:13 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys

2014-06-03 19:26 - 2014-03-17 18:13 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys

2014-06-03 19:26 - 2012-12-12 00:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll

2014-06-03 19:26 - 2012-12-12 00:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-05-30 07:58 - 2014-05-30 07:58 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2014-05-30 07:55 - 2014-05-30 07:55 - 04968079 _____ (Tim Kosse) C:\Users\seaimager\Desktop\FileZilla_3.8.0_win32-setup.exe

2014-05-21 18:22 - 2014-05-21 18:22 - 00001237 _____ () C:\Users\seaimager\Desktop\AVS Video Converter.lnk

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU

2014-05-21 18:22 - 2012-03-23 19:59 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll

2014-05-21 18:22 - 2012-03-23 19:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Program Files (x86)\Handbrake

2014-05-21 18:04 - 2014-05-21 18:04 - 14298467 _____ () C:\Users\seaimager\Downloads\HandBrake-0.9.9-1_x86_64-Win_GUI.exe
 

==================== One Month Modified Files and Folders =======
 

2014-06-17 22:17 - 2014-06-17 22:16 - 00016913 _____ () C:\Users\seaimager\Desktop\FRST.txt

2014-06-17 22:17 - 2014-06-16 23:02 - 00000000 ____D () C:\FRST

2014-06-17 22:17 - 2012-02-25 11:07 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Temp

2014-06-17 22:06 - 2012-11-08 20:19 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Skype

2014-06-17 21:46 - 2013-04-04 22:52 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-06-17 21:25 - 2012-10-02 12:59 - 01318691 _____ () C:\Windows\WindowsUpdate.log

2014-06-17 21:20 - 2014-06-17 19:37 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-06-17 20:49 - 2014-06-17 20:49 - 00001027 _____ () C:\Users\Public\Desktop\MozBackup.lnk

2014-06-17 20:49 - 2014-06-17 20:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup

2014-06-17 20:49 - 2014-06-17 20:49 - 00000000 ____D () C:\Program Files (x86)\MozBackup

2014-06-17 20:48 - 2014-06-17 20:48 - 01035926 _____ () C:\Users\seaimager\Downloads\MozBackup-1.5.1-EN.exe

2014-06-17 20:35 - 2014-06-17 20:35 - 00000000 ____D () C:\Users\seaimager\Desktop\Neuer Ordner

2014-06-17 20:29 - 2014-06-17 20:29 - 00000778 _____ () C:\Users\seaimager\Desktop\JRT.txt

2014-06-17 20:27 - 2009-07-14 06:45 - 00014640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-06-17 20:27 - 2009-07-14 06:45 - 00014640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-06-17 20:26 - 2009-07-14 19:58 - 10488290 _____ () C:\Windows\system32\perfh007.dat

2014-06-17 20:26 - 2009-07-14 19:58 - 03248030 _____ () C:\Windows\system32\perfc007.dat

2014-06-17 20:26 - 2009-07-14 07:13 - 00787956 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-06-17 20:23 - 2014-06-17 20:23 - 01016261 _____ (Thisisu) C:\Users\seaimager\Desktop\JRT(1).exe

2014-06-17 20:22 - 2014-06-17 20:22 - 00004169 _____ () C:\Users\seaimager\Desktop\AdwCleaner[S0].txt

2014-06-17 20:20 - 2014-05-03 09:34 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\DropboxMaster

2014-06-17 20:20 - 2013-04-04 22:52 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-06-17 20:20 - 2013-01-19 20:13 - 00000000 ___RD () C:\Users\seaimager\Dropbox

2014-06-17 20:20 - 2013-01-19 20:05 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Dropbox

2014-06-17 20:20 - 2012-03-02 20:50 - 00149474 _____ () C:\Windows\PFRO.log

2014-06-17 20:20 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-06-17 20:20 - 2009-07-14 06:51 - 00129900 _____ () C:\Windows\setupact.log

2014-06-17 20:18 - 2014-06-17 20:17 - 00000000 ____D () C:\AdwCleaner

2014-06-17 20:15 - 2014-06-17 20:15 - 01333465 _____ () C:\Users\seaimager\Desktop\adwcleaner_3.212.exe

2014-06-17 20:15 - 2014-06-17 20:15 - 00083124 _____ () C:\Users\seaimager\Desktop\mbam.txt

2014-06-17 19:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system

2014-06-17 19:45 - 2014-03-30 19:26 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Browser Extensions

2014-06-17 19:45 - 2013-02-10 23:37 - 00000000 ____D () C:\Temp

2014-06-17 19:37 - 2014-06-17 19:37 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-06-17 19:37 - 2014-06-17 19:37 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-06-17 19:36 - 2014-06-17 19:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\seaimager\Downloads\mbam-setup-2.0.2.1012.exe

2014-06-17 19:28 - 2012-02-25 20:08 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\vlc

2014-06-17 19:09 - 2013-04-04 22:52 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Google

2014-06-17 18:39 - 2012-02-25 14:26 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Adobe

2014-06-17 00:22 - 2013-10-21 21:35 - 00000000 ____D () C:\ProgramData\Oracle

2014-06-17 00:21 - 2014-06-17 00:21 - 00004471 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log

2014-06-17 00:21 - 2012-03-22 22:50 - 00000000 ____D () C:\Program Files (x86)\Java

2014-06-16 23:35 - 2014-06-16 23:35 - 00276128 _____ () C:\Windows\Minidump\061614-14664-01.dmp

2014-06-16 23:35 - 2013-06-01 01:43 - 755909730 _____ () C:\Windows\MEMORY.DMP

2014-06-16 23:35 - 2013-06-01 01:43 - 00000000 ____D () C:\Windows\Minidump

2014-06-16 23:18 - 2014-06-16 23:18 - 00380416 _____ () C:\Users\seaimager\Desktop\Gmer-19357.exe

2014-06-16 23:01 - 2014-06-16 23:00 - 02081280 _____ (Farbar) C:\Users\seaimager\Desktop\FRST64.exe

2014-06-16 22:11 - 2012-02-25 20:00 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\PTGui

2014-06-15 17:33 - 2014-06-15 17:33 - 01315636 _____ () C:\Users\seaimager\Downloads\com_zoo_3.1.6.zip

2014-06-15 13:26 - 2014-06-15 13:26 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586(1).exe

2014-06-15 13:22 - 2014-06-15 13:19 - 00000000 ____D () C:\Users\seaimager\Documents\Java

2014-06-15 13:17 - 2014-06-15 13:17 - 00682480 _____ () C:\Users\seaimager\Downloads\jre-7u51-windows-i586.exe

2014-06-14 11:16 - 2014-04-13 20:07 - 00508844 _____ () C:\Users\seaimager\AppData\Roaming\PS12_panel.log

2014-06-14 11:08 - 2014-06-14 11:08 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-06-14 11:08 - 2014-06-14 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-06-14 11:08 - 2014-06-14 11:07 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-06-14 11:08 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\iTunes

2014-06-14 11:08 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-06-14 11:08 - 2012-02-26 11:20 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Apple Computer

2014-06-14 11:08 - 2012-02-25 20:06 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Apple Computer

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\iPod

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Common Files\Apple

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files\Bonjour

2014-06-14 11:07 - 2014-06-14 11:07 - 00000000 ____D () C:\Program Files (x86)\Bonjour

2014-06-14 11:07 - 2012-02-25 20:03 - 00000000 ____D () C:\ProgramData\Apple Computer

2014-06-14 11:07 - 2012-02-25 20:02 - 00000000 ____D () C:\ProgramData\Apple

2014-06-14 11:06 - 2014-06-14 11:06 - 112616784 _____ (Apple Inc.) C:\Users\seaimager\Downloads\iTunes64Setup.exe

2014-06-07 13:09 - 2012-03-03 10:10 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\HandBrake

2014-06-07 12:58 - 2012-06-04 19:13 - 00002465 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk

2014-06-07 12:58 - 2012-06-04 19:13 - 00002453 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk

2014-06-07 12:58 - 2012-06-04 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2

2014-06-07 12:57 - 2012-11-08 20:19 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-06-07 12:57 - 2012-11-08 20:19 - 00000000 ____D () C:\ProgramData\Skype

2014-06-05 21:28 - 2014-06-05 21:28 - 00830792 _____ (Click Me In Limited) C:\Users\seaimager\AppData\Local\nsoCBCB.tmp

2014-06-05 20:55 - 2012-02-25 11:08 - 00000000 ___RD () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-06-05 20:47 - 2012-02-25 14:18 - 00001142 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2014-06-05 20:47 - 2012-02-25 11:08 - 00001421 _____ () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-06-05 20:46 - 2014-06-05 20:46 - 00003188 _____ () C:\Windows\System32\Tasks\{801D570B-E4AB-4EC0-BB0A-C3775BBC798E}

2014-06-05 20:42 - 2014-06-05 20:42 - 00000000 ____D () C:\Users\seaimager\AppData\Local\com

2014-06-05 20:32 - 2014-06-05 20:17 - 00000000 ____D () C:\Users\seaimager\AppData\Local\Genesis_06051817

2014-06-03 21:06 - 2014-05-10 17:57 - 00000000 ____D () C:\Users\seaimager\Desktop\LR Export

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\WTablet

2014-06-03 19:30 - 2014-06-03 19:30 - 00000000 ____D () C:\Users\seaimager\.android

2014-06-03 19:30 - 2012-02-25 11:07 - 00000000 ____D () C:\Users\seaimager

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files\TabletPlugins

2014-06-03 19:27 - 2014-06-03 19:27 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins

2014-06-03 19:27 - 2014-06-03 19:26 - 00000000 ____D () C:\Program Files\Tablet

2014-06-03 19:26 - 2014-06-03 19:26 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2014-06-01 19:39 - 2012-06-04 22:42 - 00001456 _____ () C:\Users\seaimager\AppData\Local\Adobe Für Web speichern 13.0 Prefs

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-05-31 10:29 - 2014-05-31 10:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-05-30 13:46 - 2012-02-25 18:54 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\FileZilla

2014-05-30 08:00 - 2012-02-25 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2014-05-30 07:58 - 2014-05-30 07:58 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2014-05-30 07:55 - 2014-05-30 07:55 - 04968079 _____ (Tim Kosse) C:\Users\seaimager\Desktop\FileZilla_3.8.0_win32-setup.exe

2014-05-30 07:47 - 2013-04-04 22:52 - 00000000 ____D () C:\ProgramData\Google

2014-05-29 10:21 - 2013-01-19 20:06 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-29 10:20 - 2012-04-05 21:51 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-29 10:20 - 2012-03-22 22:18 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-21 18:22 - 2014-05-21 18:22 - 00001237 _____ () C:\Users\seaimager\Desktop\AVS Video Converter.lnk

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\ProgramData\AVS4YOU

2014-05-21 18:22 - 2014-05-21 18:22 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Users\seaimager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake

2014-05-21 18:05 - 2014-05-21 18:05 - 00000000 ____D () C:\Program Files (x86)\Handbrake

2014-05-21 18:04 - 2014-05-21 18:04 - 14298467 _____ () C:\Users\seaimager\Downloads\HandBrake-0.9.9-1_x86_64-Win_GUI.exe

2014-05-18 09:00 - 2012-06-12 19:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
 

Files to move or delete:

====================

C:\ProgramData\PKP_DLbx.DAT
 
 

Some content of TEMP:

====================

C:\Users\seaimager\AppData\Local\Temp\AMDCleanupUtility.exe

C:\Users\seaimager\AppData\Local\Temp\amsetup_activeris_default_010414_installer.exe

C:\Users\seaimager\AppData\Local\Temp\BackupSetup.exe

C:\Users\seaimager\AppData\Local\Temp\Cleanup.dll

C:\Users\seaimager\AppData\Local\Temp\cloud_backup_setup.exe

C:\Users\seaimager\AppData\Local\Temp\difxapi.dll

C:\Users\seaimager\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgdcdqn.dll

C:\Users\seaimager\AppData\Local\Temp\genesisinstaller.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe

C:\Users\seaimager\AppData\Local\Temp\lly_webssearches.exe

C:\Users\seaimager\AppData\Local\Temp\optimizerpro.exe

C:\Users\seaimager\AppData\Local\Temp\Quarantine.exe

C:\Users\seaimager\AppData\Local\Temp\SkypeSetup.exe

C:\Users\seaimager\AppData\Local\Temp\vopackage.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-06-01 18:46
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-06-2014

Ran by seaimager at 2014-06-17 22:17:38

Running from C:\Users\seaimager\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.10 - Adobe Systems)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden

Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{626B3D60-A661-4444-AAF5-6C75E55936E8}) (Version: 5.0 - Adobe Systems Incorporated)

Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)

Adobe Flash Player 10 ActiveX (HKLM-x32\...\{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}) (Version: 10.1.52.14 - Adobe Systems, Inc.)

Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)

Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden

Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)

Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden

Adobe Photoshop Lightroom 5.3 64-bit (HKLM\...\{2DD71ACB-552D-402C-9529-7906ACB95C30}) (Version: 5.3.1 - Adobe Systems Incorporated)

Adobe Reader X (10.1.2) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.2 - Adobe Systems Incorporated)

Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)

Adobe Widget Browser (x32 Version: 2.0.348 - Adobe Systems Incorporated.) Hidden

AKVIS NatureArt (HKLM-x32\...\{592B6EFD-B341-4802-B3B4-A808AF6CC805}) (Version: 4.5.1200.8634 - AKVIS)

AMD Accelerated Video Transcoding (Version: 12.5.100.21219 - Advanced Micro Devices, Inc.) Hidden

AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden

AMD Catalyst Install Manager (HKLM\...\{9AB0D5B6-4779-8C4F-CA91-A1FEDB56D7EC}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)

AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden

AMD Media Foundation Decoders (Version: 1.0.71219.1540 - Advanced Micro Devices, Inc.) Hidden

AMP Font Viewer (HKLM-x32\...\AMP Font Viewer) (Version:  - )

Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

AV Stumpfl Wings (HKLM-x32\...\AV Stumpfl Wings (V 5.3.3)) (Version: 5.3.3 - AV Stumpfl)

AVS Video Converter 8.5 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 8.5.1.551 - Online Media Technologies Ltd.)

bl (x32 Version: 1.0.0 - Your Company Name) Hidden

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Canon SELPHY CP740 (HKLM\...\Canon SELPHY CP740) (Version:  - )

Capture One 7.1 (HKLM\...\CaptureOne7_is1) (Version: 7.1.5.17 - Phase One A/S)

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

cyberJack Base Components (HKLM-x32\...\{FC338210-F594-11D3-BA24-00001C3AB4DF}) (Version: 6.10.0 - REINER SCT)

Digital Signage with Apps (HKLM-x32\...\SyabasTech-DigitalSignage) (Version: 1.2.2 - UNKNOWN)

Digital Signage with Apps (x32 Version: 1.2.2 - UNKNOWN) Hidden

Digital Signage with Apps Preview (HKLM-x32\...\SyabasTech-DigitalSignage-Preview) (Version: 1.1.1 - UNKNOWN)

Digital Signage with Apps Preview (x32 Version: 1.1.1 - UNKNOWN) Hidden

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)

Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)

FileZilla Client 3.8.0 (HKLM-x32\...\FileZilla Client) (Version: 3.8.0 - Tim Kosse)

Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.25.0 - Google Inc.) Hidden

HandBrake 0.9.9.1 (HKLM-x32\...\HandBrake) (Version: 0.9.9.1 - )

iColor Display 3.8.5.1 (nur entfernen) (HKCU\...\iColorDisplay) (Version:  - )

iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)

Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051F0}) (Version: 7.0.510 - Oracle)

Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.600 - Oracle)

Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden

Java(TM) 6 Update 37 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216035FF}) (Version: 6.0.370 - Oracle)

KeePass Password Safe 2.18 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version:  - Dominik Reichl)

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

MediaInfo 0.7.63 (HKLM\...\MediaInfo) (Version: 0.7.63 - MediaArea.net)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden

Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden

Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version:  - Pavel Cvrcek)

Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)

Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.0.4 - Google)

Pano2VR - Garden Gnome Software (HKLM-x32\...\Pano2VR) (Version:  - )

PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden

PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden

ph (x32 Version: 1.0.0 - Your Company Name) Hidden

Photo Mechanic 5 (HKLM-x32\...\{DE924CF0-B8BB-42BA-BDA0-14535F79DF3F}) (Version: 5.0 - Camera Bits, Inc)

Photomatix Pro version 4.2.7 (HKLM\...\PhotomatixPro42x64_is1) (Version: 4.2.7 - HDRsoft Ltd)

PTGui Pro 9.1.8 (HKLM-x32\...\PTGui) (Version:  - New House Internet Services B.V.)

PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden

QNAP Finder (HKLM-x32\...\QNAP_FINDER) (Version: 3.4.3.0523 - QNAP Systems, Inc.)

Qstarz Data Viewer V1.31 (HKLM-x32\...\Qstarz Data Viewer) (Version: V1.31 - )

QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

QuoVadis 6 (HKLM-x32\...\QuoVadis 6_is1) (Version: 6 - Flemming Software Development CC)

QuoVadis 7 (HKLM-x32\...\QuoVadis 7_is1) (Version: 7 - Flemming Software Development CC)

Safe In Cloud Password Manager (HKLM-x32\...\{450B8D73-CA79-40B6-B156-DD5B43CAD7B7}) (Version: 2.0 - Safe In Cloud)

Sentinel System Driver Installer 7.5.7 (HKLM-x32\...\{B281C7D1-C088-40E0-86EA-B2D9D7E0810A}) (Version: 7.5.7 - SafeNet, Inc.)

Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version:  - )

Silicon Laboratories CP210x VCP Drivers for Windows 7 (HKLM-x32\...\{FDDE7051-DEBB-41FF-A14C-5A995A290272}) (Version: 5.40.24 - Silicon Laboratories, Inc.)

Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)

Super CAD (HKLM-x32\...\Super CAD) (Version:  - )

Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version:  - )

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)

True Image 2013 (HKLM-x32\...\{59F3D2AC-5F1F-4A93-8F23-6FD4F029D9A9}Visible) (Version: 16.0.5551 - Acronis)

True Image 2013 (x32 Version: 16.0.5551 - Acronis) Hidden

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VLC media player 2.0.0 (HKLM-x32\...\VLC media player) (Version: 2.0.0 - VideoLAN)

Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.8-4 - Wacom Technology Corp.)

WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)

Windows-Treiberpaket - Phase One A/S (WinUSB) USBDevice  (05/30/2013 1.12.0.68182) (HKLM\...\1D6C98F8A5FED93B7C062B26DD383655CE271976) (Version: 05/30/2013 1.12.0.68182 - Phase One A/S)

Wings Platinum 4 (HKLM-x32\...\{BBFF1DB6-55F9-41CA-B4C4-9432EC14AEFB}) (Version: 4.25.2 - AV Stumpfl)

WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D7}) (Version: 17.0.10283 - WinZip Computing, S.L. )
 

==================== Restore Points  =========================
 

26-05-2014 17:37:36 Geplanter Prüfpunkt

30-05-2014 05:47:01 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106

30-05-2014 05:47:08 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106

14-06-2014 09:07:40 Installed iTunes

15-06-2014 11:23:13 Installed Java 7 Update 51

16-06-2014 22:21:39 Installed Java 7 Update 60

17-06-2014 17:08:13 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106

17-06-2014 17:08:25 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {094732E7-291E-4A8E-9718-1997CC61ACE1} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)

Task: {48EC4FFD-02EF-4B88-9EC3-FBCBA0C50E43} - System32\Tasks\AdobeAAMUpdater-1.0-JBs_PC_2-seaimager => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)

Task: {82E79536-3F61-4842-93D0-F7BFB144A93E} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION

Task: {96429E48-7204-4417-AF9C-3648B0DAE097} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION

Task: {BA1F0223-C938-4F0B-BB89-A706C5B4F613} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-04] (Google Inc.)

Task: {FE006A67-5C76-4D20-A1F8-645656FCCB98} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {FEBC7433-917F-4A3E-A461-146CAFF70C0B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-04] (Google Inc.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-11-14 15:28 - 2013-11-14 15:28 - 00248736 _____ () C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe

2013-11-26 17:55 - 2013-11-26 17:55 - 01550848 _____ () C:\Program Files (x86)\Safe In Cloud\SafeInCloud.exe

2011-07-29 01:08 - 2011-07-29 01:08 - 01259376 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2014-06-03 19:26 - 2014-04-22 00:30 - 01356568 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll

2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-01-06 17:54 - 2007-05-31 08:38 - 00167936 ____N () C:\Windows\SysWOW64\SerialXP.dll

2012-08-23 01:42 - 2012-08-23 01:42 - 00435584 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll

2014-06-17 20:20 - 2014-06-17 20:20 - 00043008 _____ () C:\Users\seaimager\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgdcdqn.dll

2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\seaimager\AppData\Roaming\Dropbox\bin\libcef.dll

2011-07-29 01:09 - 2011-07-29 01:09 - 00096112 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2014-05-08 13:22 - 2014-05-08 13:22 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu

2012-08-23 04:35 - 2012-08-23 04:35 - 13873200 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll

2012-08-23 04:31 - 2012-08-23 04:31 - 01590656 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\icudt38.dll

2012-07-24 15:48 - 2012-07-24 15:48 - 00012160 _____ () C:\Program Files (x86)\Common Files\Acronis\TibMounter\icudt38.dll

2014-05-13 23:04 - 2014-05-13 23:04 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2014-05-29 10:20 - 2014-05-29 10:20 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

2014-05-17 12:19 - 2014-05-17 12:19 - 03019888 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll

2014-05-17 12:19 - 2014-05-17 12:19 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll

2014-05-17 12:19 - 2014-05-17 12:19 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

2012-08-23 02:12 - 2012-08-23 02:12 - 00019840 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers_proxy_stub.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\Windows:nlsPreferences

AlternateDataStreams: C:\ProgramData\TEMP:3241321C

AlternateDataStreams: C:\Users\seaimager\AppData\Local\Temp:QxzaNzdeoy5arJs302ramfp7S6
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== EXE Association (whitelisted) =============
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 
 

==================== Faulty Device Manager Devices =============
 

Name: RAID-Controller

Description: RAID-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============
 

Microsoft Office Sessions:

=========================
 

CodeIntegrity Errors:

===================================

  Date: 2013-06-04 17:25:43.778

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-04 17:25:43.732

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:45:11.309

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:45:11.278

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:33:55.556

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:33:55.524

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:29:23.956

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:29:23.910

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:27:29.106

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-01 15:27:29.075

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\atikmpag.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 23%

Total physical RAM: 12279.12 MB

Available physical RAM: 9448.51 MB

Total Pagefile: 24556.42 MB

Available Pagefile: 21514.29 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:238.47 GB) (Free:60.81 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (Daten_Disk) (Fixed) (Total:1397.26 GB) (Free:752.53 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive e: (Daten_Disk) (Fixed) (Total:1397.26 GB) (Free:1207.59 GB) NTFS

Drive h: (BILDERTANK) (Fixed) (Total:465.65 GB) (Free:352.28 GB) FAT32

Drive i: (NIKON D3X) (Removable) (Total:59.62 GB) (Free:51.14 GB) FAT32

Drive k: () (Removable) (Total:29.47 GB) (Free:28.08 GB) FAT32

Drive w: (Backup) (Network) (Total:3663.11 GB) (Free:1321.57 GB) NTFS

Drive y: (Download) (Network) (Total:1832.31 GB) (Free:810 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 45131F39)

Partition 1: (Active) - (Size=-698727006208) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238 GB) (Disk ID: 529D01C9)

Partition 1: (Active) - (Size=238 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 13321468)

Partition 1: (Active) - (Size=-698727006208) - (Type=07 NTFS)
 

========================================================

Disk: 3 (Size: 466 GB) (Disk ID: 2409CEA2)

Partition 1: (Not Active) - (Size=466 GB) - (Type=0C)
 

========================================================

Disk: 4 (Size: 60 GB) (Disk ID: 00000000)
 

Partition: GPT Partition Type.
 

========================================================

Disk: 6 (Size: 29 GB) (Disk ID: 00000000)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 7 Professional x64

Ran by seaimager on 17.06.2014 at 20:24:23,45

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\seaimager\AppData\Roaming\mozilla\firefox\profiles\yanl13x8.default-1396898604837\minidumps [6 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 17.06.2014 at 20:29:24,51

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Code:

# AdwCleaner v3.212 - Bericht erstellt am 17/06/2014 um 20:18:37

# Aktualisiert 05/06/2014 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzername : seaimager - JBS_PC_2

# Gestartet von : C:\Users\seaimager\Desktop\adwcleaner_3.212.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

[#] Dienst Gelöscht : globalUpdate

[#] Dienst Gelöscht : globalUpdatem
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\WindowsProtectManger

Ordner Gelöscht : C:\Program Files (x86)\globalUpdate

Ordner Gelöscht : C:\Program Files (x86)\Optimizer Pro

Ordner Gelöscht : C:\Program Files (x86)\predm

Ordner Gelöscht : C:\Program Files\003

Ordner Gelöscht : C:\Users\seaimager\AppData\Local\globalUpdate

Ordner Gelöscht : C:\Users\seaimager\AppData\Roaming\Activeris

Ordner Gelöscht : C:\Users\seaimager\AppData\Roaming\SupTab

Ordner Gelöscht : C:\Users\seaimager\Documents\Optimizer Pro

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\user.js

Datei Gelöscht : C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job

Datei Gelöscht : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore

Datei Gelöscht : C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job

Datei Gelöscht : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ActiverisAntiMalware_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ActiverisAntiMalware_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10

Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DFEFCDEE-CF1A-4FC8-89AF-189327213627}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DFEFCDEE-CF1A-4FC8-89AF-189327213627}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DFEFCDEE-CF1A-4FC8-89AF-189327213627}]

Wert Gelöscht : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]

Schlüssel Gelöscht : HKCU\Software\AnyProtect

Schlüssel Gelöscht : HKCU\Software\genesis

Schlüssel Gelöscht : HKCU\Software\TutoTag

Schlüssel Gelöscht : HKLM\Software\SupDp

Schlüssel Gelöscht : HKLM\Software\SupTab

Schlüssel Gelöscht : HKLM\Software\Tutorials

Schlüssel Gelöscht : HKLM\Software\Wpm

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\LevelQualityWatcher
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16686
 

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
 

-\\ Mozilla Firefox v29.0.1 (de)
 

[ Datei : C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\prefs.js ]
 

Zeile gelöscht : user_pref("browser.search.defaultenginename", "webssearches");

Zeile gelöscht : user_pref("browser.search.selectedEngine", "webssearches");

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://istart.webssearches.com/?type=hppp&ts=1402844558&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545");

Zeile gelöscht : user_pref("extensions.crossrider.bic", "1466d416dde428ac86f314384aefa167");
 

*************************
 

AdwCleaner[R0].txt - [4497 octets] - [17/06/2014 20:17:48]

AdwCleaner[S0].txt - [4021 octets] - [17/06/2014 20:18:37]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4081 octets] ##########

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 17.06.2014

Suchlauf-Zeit: 19:39:47

Logdatei: mbam.txt

Administrator: Ja
 

Version: 2.00.2.1012

Malware Datenbank: v2014.06.17.08

Rootkit Datenbank: v2014.06.02.01

Lizenz: Testversion

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Self-protection: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x64

Dateisystem: NTFS

Benutzer: seaimager
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 277160

Verstrichene Zeit: 4 Min, 38 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristics: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 3

PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, 1684, Löschen bei Neustart, [256780f96e0dab8b2bb0bd9c1ae7a45c]

Adware.Adpeak, C:\Program Files\003\buuoujqmrk64.exe, 2792, Löschen bei Neustart, [1874b3c6a4d7c57118d85a0ce81cf808]

PUP.Optional.SupraSavings.A, C:\Program Files\003\buuoujqmrk64.exe, 2792, Löschen bei Neustart, [d2baf7826c0ffa3c811fa20e0ff37b85]
 

Module: 1

PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, Löschen bei Neustart, [810bc6b353281d19f1ed0682e61b02fe], 
 

Registrierungsschlüssel: 32

PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginServices, In Quarantäne, [256780f96e0dab8b2bb0bd9c1ae7a45c], 

Adware.Adpeak, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\buuoujqmrk64, In Quarantäne, [1874b3c6a4d7c57118d85a0ce81cf808], 

PUP.Optional.Spigot, HKLM\SOFTWARE\CLASSES\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, In Quarantäne, [a6e6a8d1f5868da976d155f091718779], 

PUP.Optional.Spigot, HKLM\SOFTWARE\CLASSES\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}\INPROCSERVER32, In Quarantäne, [a6e6a8d1f5868da976d155f091718779], 

PUP.Optional.Spigot, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, In Quarantäne, [a6e6a8d1f5868da976d155f091718779], 

PUP.Optional.CouponDownloader.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{10AD2C61-0898-4348-8600-14A342F22AC3}, In Quarantäne, [c4c855240c6faf875786310e7c8636ca], 

PUP.Optional.CouponDownloader.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{10AD2C61-0898-4348-8600-14A342F22AC3}, In Quarantäne, [c4c855240c6faf875786310e7c8636ca], 

PUP.Optional.CouponDownloader.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10AD2C61-0898-4348-8600-14A342F22AC3}, In Quarantäne, [c4c855240c6faf875786310e7c8636ca], 

PUP.Optional.CouponDownloader.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{10AD2C61-0898-4348-8600-14A342F22AC3}, In Quarantäne, [c4c855240c6faf875786310e7c8636ca], 

PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [35575029f685fb3bf105f151738f718f], 

PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [35575029f685fb3bf105f151738f718f], 

PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [35575029f685fb3bf105f151738f718f], 

PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [35575029f685fb3bf105f151738f718f], 

PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [35575029f685fb3bf105f151738f718f], 

PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [35575029f685fb3bf105f151738f718f], 

PUP.Optional.SupTab.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [35575029f685fb3bf105f151738f718f], 

PUP.Optional.SupTab.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [35575029f685fb3bf105f151738f718f], 

PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [35575029f685fb3bf105f151738f718f], 

PUP.Optional.Spigot.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{3A787631-66A2-4634-B928-A37E73B58FB6}, In Quarantäne, [94f83f3a7efd8fa7ca456cd0a15fd32d], 

PUP.Optional.SupraSavings.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\buuoujqmrk64, In Quarantäne, [d2baf7826c0ffa3c811fa20e0ff37b85], 

PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\suprasavings, In Quarantäne, [226ab1c8106b5adc24c86a4b4db550b0], 

PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [6d1f42375823181e1ad18d58cf34cf31], 

PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, In Quarantäne, [a5e729506912d5617304b9fe44bef20e], 

PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [6923562396e566d015d6d31206fd53ad], 

PUP.Optional.AdPeak.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{E6B105B8-1F65-4428-9397-1DFD8A03B94D}, In Quarantäne, [dfad6e0b9be020164a37475d7092b44c], 

PUP.Optional.MediaPlayerPlus.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Media_Play_AIR+_1.1, In Quarantäne, [573541382c4f5fd74b74366ff50d2fd1], 

PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-9.1, In Quarantäne, [414b5a1f97e42f076dd1ad0a48bae818], 

PUP.Optional.SupraSavings.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SupraSavings, In Quarantäne, [43490772a1dab581bc31486d39c9ed13], 

PUP.Optional.CrossRider.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [ee9eaacfc4b7fb3bfda8c529a75c52ae], 

PUP.Optional.SupraSavings.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Supra Savings, In Quarantäne, [d4b896e34b30a294b62b852fa161ac54], 

PUP.Optional.SupraSavings.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\suprasavings, In Quarantäne, [4349f4858fec78bec8261b9a25dd5ba5], 

PUP.Optional.Qone8, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [28642b4ec6b54beb10daebfa996a827e], 
 

Registrierungswerte: 3

PUP.Optional.Spigot.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Browser Extensions, "C:\Users\seaimager\AppData\Roaming\Browser Extensions\CouponsHelper.exe", In Quarantäne, [fa92bcbd186340f6a0b5ef051de6d12f]

PUP.Optional.FirstSeenToday.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|fst_de_31, In Quarantäne, [711bd0a94536d46297c68c241ce6a25e], 

PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_start@gmail.com, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com, In Quarantäne, [2b6184f565164ee8f93bd0e8a95951af]
 

Registrierungsdaten: 14

PUP.Optional.Skytech.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SupTab\SEARCH~2.DLL, Gut: (), Schlecht: (C:\PROGRA~2\SupTab\SEARCH~2.DLL),Ersetzt,[fd8f027718638da96579dfa9e1206898]

PUP.Optional.Skytech.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SupTab\SEARCH~1.DLL, Gut: (), Schlecht: (C:\PROGRA~2\SupTab\SEARCH~1.DLL),Ersetzt,[1d6fa5d43a4161d5439b7f09fd040bf5]

PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545),Ersetzt,[c4c86f0a3c3f5dd99e3474fc34d0d828]

PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}),Ersetzt,[1775fd7c522974c25475acc47a8a2ed2]

PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545),Ersetzt,[b8d43544027933033790ff71ed1716ea]

PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545),Ersetzt,[54385b1ebcbf8caa0ebd81ef62a20000]

PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[8ffd7207cbb0d1657585700aa65ea759]

PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545),Ersetzt,[1f6d91e8621940f6d9f980f080848f71]

PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545&q={searchTerms}),Ersetzt,[5c308beec8b30531f0d968083ec6f60a]

PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545),Ersetzt,[7d0fb8c137442313d9ee8ce4f90b4db3]

PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545),Ersetzt,[c4c887f209724ee815b6c9a7d4308c74]

PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[751793e6c4b7d165fa007ffb31d3e61a]

PUP.Optional.WebsSearches.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545),Ersetzt,[5339babff58688ae5d6f026e3ec608f8]

PUP.Optional.WebsSearches.A, HKU\S-1-5-21-1090653915-3958093925-69300803-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1401992283&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545),Ersetzt,[1e6e5e1b8fec3ef83692432dc0448e72]
 

Ordner: 92

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, Löschen bei Neustart, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\include, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\include\tools, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\lib, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\pack, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\en, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\en-US, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\es, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\es-419, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\fr, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\fr-BE, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\fr-CA, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\fr-CH, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\fr-LU, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\it, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\it-CH, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\pl, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\pt-BR, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\ru, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\ru-MO, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\tr, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\vi, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\zh-CN, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\zh-TW, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\weather, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\defaults, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\defaults\preferences, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\defaults, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\defaults\preferences, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\locale, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\addon-kit, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\addon-kit\data, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\addon-kit\lib, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\data, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\event, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\addon, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\content, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\dom, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\events, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\l10n, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\private-browsing, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\system, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\tabs, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\traits, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\utils, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\window, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\windows, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\SupraSavings, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\SupraSavings\data, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\SupraSavings\lib, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\SupraSavings\tests, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, Löschen bei Neustart, [7517b9c0bfbc2b0b13d33e626e948080], 

PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, In Quarantäne, [7517b9c0bfbc2b0b13d33e626e948080], 

PUP.Optional.SearchProtect.A, C:\Users\seaimager\AppData\Local\SearchProtect, In Quarantäne, [7b1193e6b4c7f93d95522e72e81a56aa], 

PUP.Optional.SearchProtect.A, C:\Users\seaimager\AppData\Local\SearchProtect\Logs, In Quarantäne, [7b1193e6b4c7f93d95522e72e81a56aa], 
 

Dateien: 257

PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, Löschen bei Neustart, [256780f96e0dab8b2bb0bd9c1ae7a45c], 

PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, Löschen bei Neustart, [810bc6b353281d19f1ed0682e61b02fe], 

Adware.Adpeak, C:\Program Files\003\buuoujqmrk64.exe, Löschen bei Neustart, [1874b3c6a4d7c57118d85a0ce81cf808], 

PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect64.dll, In Quarantäne, [fd8f027718638da96579dfa9e1206898], 

PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, In Quarantäne, [1d6fa5d43a4161d5439b7f09fd040bf5], 

PUP.Optional.Spigot, C:\Users\seaimager\AppData\Roaming\Browser Extensions\Coupons64.dll, In Quarantäne, [a6e6a8d1f5868da976d155f091718779], 

PUP.Optional.CouponDownloader.A, C:\Program Files (x86)\SupraSavings\2rs3.dll, In Quarantäne, [c4c855240c6faf875786310e7c8636ca], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, In Quarantäne, [35575029f685fb3bf105f151738f718f], 

PUP.Optional.Spigot.A, C:\Users\seaimager\AppData\Roaming\Browser Extensions\Uninstall.exe, In Quarantäne, [94f83f3a7efd8fa7ca456cd0a15fd32d], 

PUP.Optional.AdPeak.A, C:\Temp\InstallFilter64.msi, In Quarantäne, [4c40fc7d7308ed496916fa430ff139c7], 

PUP.Optional.SupraSavings.A, C:\Temp\t.msi, In Quarantäne, [09836b0ebbc07cba624310555ea63ac6], 

PUP.Optional.ScramblePacker.A, C:\Users\seaimager\AppData\Local\Temp\media.exe, In Quarantäne, [7715b5c4552665d136d6602b639ec53b], 

PUP.Optional.Spigot.A, C:\Users\seaimager\AppData\Local\Temp\~sp59A6.tmp, In Quarantäne, [f894ea8f4437072f38d796a6808038c8], 

PUP.Optional.Wajam.A, C:\Users\seaimager\AppData\Local\Temp\wajam_download.exe, In Quarantäne, [187461182754ac8a705b24221ee238c8], 

PUP.Optional.Conduit.A, C:\Users\seaimager\AppData\Local\Temp\spidentifierimpl.exe, In Quarantäne, [6d1feb8e8cef88aead2df690f50c57a9], 

PUP.Optional.NewPlayer.A, C:\Users\seaimager\AppData\Local\Temp\newvideoplayersetup.exe, In Quarantäne, [048845342f4cdc5ab1381a67ad54d52b], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Local\Temp\f978377c-b7d4-4536-8e10-14ca97b13394.exe, In Quarantäne, [7c1011682f4c90a6665b0231fa08c33d], 

PUP.Optional.FirstSeenToday, C:\Users\seaimager\AppData\Local\Temp\freesofttoday.exe, In Quarantäne, [a8e48bee6813c4724d0ebacadb265ca4], 

PUP.Optional.InstallMonetizer.A, C:\Users\seaimager\AppData\Local\Temp\is-KQH27.tmp\IMNS.exe, In Quarantäne, [c6c67affc8b3a98d6254a98156ab9868], 

PUP.Optional.SupraSavings.A, C:\Windows\Installer\13bc52.msi, In Quarantäne, [bdcfb2c7384313239510b4b10cf8c937], 

PUP.Optional.SupraSavings.A, C:\Program Files\003\buuoujqmrk64.exe, Löschen bei Neustart, [d2baf7826c0ffa3c811fa20e0ff37b85], 

PUP.Optional.WebsSearches.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\webssearches.xml, In Quarantäne, [7e0e2d4cb0cb5fd7740509ae4ab8bd43], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterfacef32.dll, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\RSHP.exe, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SpAPPSv32.dll, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SpAPPSv64.dll, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WebDataJs, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\arrow.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_logo.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo2.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\0.png, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ie8.js, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, In Quarantäne, [47454732ee8d8ea8b92cbe02b54da759], 

PUP.Optional.Spigot.A, C:\Users\seaimager\AppData\Roaming\Browser Extensions\CouponsHelper.exe, In Quarantäne, [fa92bcbd186340f6a0b5ef051de6d12f], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome.manifest, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\install.rdf, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\index.html, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\quick_start.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\include\pageload.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\include\tools\about_blank_hook.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\include\tools\popup_image_helper.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\include\tools\urlrequestor.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\js.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\toolbar.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\lib\doT.min.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\bookmark.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\helpGider.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\hotSearch.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\other.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\pageManager.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\pageNew.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\search.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\searchMode.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\stat.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\wallpaper.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\module\weather.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\pack\browerStart.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\pack\common.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\pack\ga.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\content\js\pack\xagainit.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\arrow.png, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\default_add_logo.png, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\default_add_logo_hover.png, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\googlelogo2.png, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\icon.png, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\loading.gif, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\logo.ico, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\logo.png, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\logo32.ico, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\media.css, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\style.css, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\chrome\skin\weather\0.png, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\defaults\preferences\preferences.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules\addonmanager.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules\aes.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules\config.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules\dialogs.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules\last_tab.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules\misc.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules\properties.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules\remoterequest.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules\restoreprefs.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.QuickStart.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\quick_start@gmail.com\modules\settings.js, In Quarantäne, [6527d6a363181f175af2bed362a06f91], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\background.js, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\CustomActionInstall, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\CustomActionUninstall, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\icon128.png, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\icon16.png, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\icon32.png, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\icon48.png, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\icon64.png, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\icon8.png, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\iwalyk.js, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\manifest.json, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\marcopolo.js, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\Microsoft.Deployment.WindowsInstaller.dll, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\Microsoft.Deployment.WindowsInstaller.xml, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Program Files (x86)\SupraSavings\SendJson.dll, In Quarantäne, [8a024237611a0036c2bff2a06c962fd1], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\bootstrap.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\harness-options.json, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\icon.png, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\install.rdf, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\locales.json, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\defaults\preferences\prefs.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\addon-kit\lib\page-mod.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\addon-kit\lib\private-browsing.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\addon-kit\lib\request.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\addon-kit\lib\windows.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\observer-service.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\api-utils.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\base64.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\byte-streams.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\collection.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\content.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\cortex.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\cuddlefish.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\deprecate.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\environment.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\errors.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\events.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\file.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\functional.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\globals.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\heritage.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\hidden-frame.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\light-traits.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\list.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\loader.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\match-pattern.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\memory.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\namespace.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\plain-text-console.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\preferences-service.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\promise.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\querystring.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\runtime.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\sandbox.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\self.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\system.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\text-streams.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\timer.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\traceback.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\traits.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\unload.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\url.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\uuid.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\window-utils.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\xhr.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\xpcom.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\xul-app.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\event\core.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\event\target.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\addon\runner.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\content\content-proxy.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\content\content-worker.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\content\loader.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\content\symbiont.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\content\worker.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\dom\events.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\events\assembler.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\l10n\core.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\l10n\html.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\l10n\loader.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\l10n\locale.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\l10n\prefs.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\private-browsing\utils.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\system\events.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\tabs\events.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\tabs\observer.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\tabs\tab.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\tabs\utils.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\traits\core.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\utils\data.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\utils\object.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\utils\registry.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\utils\thumbnail.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\window\utils.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\windows\dom.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\windows\loader.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\windows\observer.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\api-utils\lib\windows\tabs.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\SupraSavings\data\icon64.png, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.SupraSavings.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\extensions\SupraSavings@jetpack\resources\SupraSavings\lib\main.js, In Quarantäne, [1775e297e09be94d9192fc9732d025db], 

PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, In Quarantäne, [7517b9c0bfbc2b0b13d33e626e948080], 

PUP.Optional.WebsSearches.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\prefs.js, Gut: (), Schlecht: (user_pref("browser.startup.homepage", "hxxp://istart.webssearches.com/?type=hppp&ts=1402844558&from=tugs&uid=WDCXWD15EADS-00P8B0_WD-WMAVU098454584545");), Ersetzt,[5b311c5d32499f9750f44f59b84c9b65]

PUP.Optional.CrossRider.A, C:\Users\seaimager\AppData\Roaming\Mozilla\Firefox\Profiles\yanl13x8.default-1396898604837\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "1466d416dde428ac86f314384aefa167");), Ersetzt,[fd8fcbae3e3d52e4961904a4b64ebd43]
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

Hallo Cosinus

hoffe dass nun alles passt
danke

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

Task: {82E79536-3F61-4842-93D0-F7BFB144A93E} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION

Task: {96429E48-7204-4417-AF9C-3648B0DAE097} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION

AlternateDataStreams: C:\ProgramData\TEMP:3241321C

AlternateDataStreams: C:\Users\seaimager\AppData\Local\Temp:QxzaNzdeoy5arJs302ramfp7S6

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.